MessagePreview.php
authorAlan <alan@roojs.com>
Thu, 29 Sep 2022 07:39:30 +0000 (15:39 +0800)
committerAlan <alan@roojs.com>
Thu, 29 Sep 2022 07:39:30 +0000 (15:39 +0800)
MessagePreview.php

index 40a5301..ce7bef4 100644 (file)
@@ -37,7 +37,7 @@ class Pman_Core_MessagePreview extends Pman
         
         
         if (isset($_REQUEST['ontable']) && !empty($_REQUEST['onid']) && !empty($_REQUEST['evtype'])) {
-            $tn = preg_replace('/[a-z_]+/i', '', $_REQUEST['ontable']);
+            $tn = preg_replace('/[^a-z_]+/i', '', $_REQUEST['ontable']);
             var_dump($tn);
             $t = DB_DataObject::factory(preg_replace('/[a-z_]+/i', '', $_REQUEST['ontable']));
             if (!is_a($t, 'DB_DataObject') && !is_a($t, 'PDO_DataObject')) {