Merge pull request #99 from sparksp/aeae2c8476523f1551825afcc17323c4b88d22c5
Secure extracts
This commit is contained in:
@@ -89,7 +89,7 @@ class Grammar {
|
||||
|
||||
foreach ($query->joins as $join)
|
||||
{
|
||||
extract($join);
|
||||
extract($join, EXTR_SKIP);
|
||||
|
||||
list($column1, $column2) = array($this->wrap($column1), $this->wrap($column2));
|
||||
|
||||
|
||||
@@ -30,7 +30,7 @@ class Cookie implements Driver {
|
||||
*/
|
||||
public function save($session, $config, $exists)
|
||||
{
|
||||
extract($config);
|
||||
extract($config, EXTR_SKIP);
|
||||
|
||||
$payload = Crypter::encrypt(serialize($session));
|
||||
|
||||
|
||||
Reference in New Issue
Block a user