Merge pull request #923 from PermaNulled/patch-1

Fix SQLi in al_data->location
ossec · Aug 18, 2016 · 81852c6 · 81852c6
2 parents f42e4d0 + 2145db5
commit 81852c6
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/src/os_dbd/alert.c b/src/os_dbd/alert.c
@@ -106,7 +106,8 @@ int OS_Alert_InsertDB(const alert_data *al_data, DBConfig *db_config)
 
     /* Escape strings */
     osdb_escapestr(al_data->user);
-
+    osdb_escapestr(al_data->location);
+
     /* We first need to insert the location */
     loc_id = (int *) OSHash_Get(db_config->location_hash, al_data->location);