diff --git a/admin/action/create_page.php b/admin/action/create_page.php index ced2024..1a0d17c 100644 --- a/admin/action/create_page.php +++ b/admin/action/create_page.php @@ -6,7 +6,8 @@ include '../includes/session.php'; if(isset($_POST['submit'])) { - $post_url = $_POST['url']; + $post_url = preg_replace('/[^A-Za-z0-9,.-]/u', '', $_POST['url']); + $post_url = rtrim($post_url, ',\.\-'); $post_content = $_POST['content']; } if(!empty($post_url) && !empty($post_content)) { @@ -57,20 +58,15 @@
+ @@ -57,14 +56,8 @@