LimeSurvey: master 78f9d04d

Diff Back to Repository
Author Committer Branch Timestamp Parent
DenisChenu GitHub master 2022-12-16 12:24:29 master 8d3bea70
Changeset

Fixed issue [security] #18553: SQL injection on surveygroup update (#2790)

Dev: need admin right
Dev: remove usage of App()->request in model
Dev: binding param for gsid
Dev: allow to set SurveysGroup in model for ListSurveysWidget
mod - application/extensions/admin/survey/ListSurveysWidget/ListSurveysWidget.php Diff File
mod - application/models/Survey.php Diff File
mod - application/models/TemplateConfiguration.php Diff File
mod - application/views/admin/surveysgroups/update.php Diff File
mod - application/views/themeOptions/surveythemelist.php Diff File