stiti/SAE_2.02
1
1
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Correction du model de recherche pour eviter les injections SQL

Browse Source
This commit is contained in:
stiti
2024-05-23 09:59:04 +02:00
parent cf13b7dc62
commit f4c70a8ab7
6 changed files with 81 additions and 51 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
CodeIgniter-3.1.13/application/views/search_results.php
View File

@@ -6,13 +6,17 @@
<title>Résultats de la recherche</title>
</head>
<body>
<h2>Résultats de la recherche pour "<?php echo $query; ?>"</h2>
<h2>Résultats de la recherche pour "<?php echo htmlspecialchars($query, ENT_QUOTES, 'UTF-8'); ?>"</h2>
<?php if (!empty($error)): ?>
<p><?php echo $error; ?></p>
<?php endif; ?>
<?php if (!empty($musiques)): ?>
<h3>Musiques</h3>
<ul>
<?php foreach($musiques as $musique): ?>
<li><?php echo $musique->name; ?> - <?php echo $musique->artistName; ?></li>
<li><?php echo htmlspecialchars($musique->name, ENT_QUOTES, 'UTF-8'); ?> - <?php echo htmlspecialchars($musique->artistName, ENT_QUOTES, 'UTF-8'); ?></li>
<?php endforeach; ?>
</ul>
<?php endif; ?>
@@ -21,7 +25,7 @@
<h3>Albums</h3>
<ul>
<?php foreach($albums as $album): ?>
<li><?php echo $album->name; ?> by <?php echo $album->artistName; ?></li>
<li><?php echo htmlspecialchars($album->name, ENT_QUOTES, 'UTF-8'); ?> by <?php echo htmlspecialchars($album->artistName, ENT_QUOTES, 'UTF-8'); ?></li>
<?php endforeach; ?>
</ul>
<?php endif; ?>
@@ -30,7 +34,7 @@
<h3>Genres</h3>
<ul>
<?php foreach($genres as $genre): ?>
<li><?php echo $genre->name; ?></li>
<li><?php echo htmlspecialchars($genre->name, ENT_QUOTES, 'UTF-8'); ?></li>
<?php endforeach; ?>
</ul>
<?php endif; ?>
@@ -39,7 +43,7 @@
<h3>Artistes</h3>
<ul>
<?php foreach($artistes as $artiste): ?>
<li><?php echo $artiste->name; ?></li>
<li><?php echo htmlspecialchars($artiste->name, ENT_QUOTES, 'UTF-8'); ?></li>
<?php endforeach; ?>
</ul>
<?php endif; ?>