8
0
Mirror von https://git.d3data.de/3rdParty/captcha-module.git synchronisiert 2025-01-30 23:08:44 +01:00

force getting escaped user inputs

Dieser Commit ist enthalten in:
Daniel Seifert 2025-01-15 13:17:43 +01:00
Ursprung 032c2d5e4c
Commit 178ad0b6da

Datei anzeigen

@ -43,13 +43,13 @@ class oeUserComponent extends oeUserComponent_parent
/* END check for Amazon Pay - no Captcha /
/* START check for PayPal Checkout - no Captcha */
if(\OxidEsales\Eshop\Core\Registry::getConfig()->getRequestParameter('fnc') == 'approveOrder')
if(\OxidEsales\Eshop\Core\Registry::getRequest()->getRequestEscapedParameter('fnc') == 'approveOrder')
{
return parent::createUser();
}
/* START check for PayPal Checkout - no Captcha */
if (\OxidEsales\Eshop\Core\Registry::getConfig()->getRequestParameter('cl') !== 'user' && !$this->getCaptcha()->passCaptcha()) {
if (\OxidEsales\Eshop\Core\Registry::getRequest()->getRequestEscapedParameter('cl') !== 'user' && !$this->getCaptcha()->passCaptcha()) {
return false;
}