MessagePreview.php
authorAlan <alan@roojs.com>
Thu, 29 Sep 2022 07:39:07 +0000 (15:39 +0800)
committerAlan <alan@roojs.com>
Thu, 29 Sep 2022 07:39:07 +0000 (15:39 +0800)
MessagePreview.php

index 8d06c9a..40a5301 100644 (file)
@@ -37,6 +37,8 @@ class Pman_Core_MessagePreview extends Pman
         
         
         if (isset($_REQUEST['ontable']) && !empty($_REQUEST['onid']) && !empty($_REQUEST['evtype'])) {
+            $tn = preg_replace('/[a-z_]+/i', '', $_REQUEST['ontable']);
+            var_dump($tn);
             $t = DB_DataObject::factory(preg_replace('/[a-z_]+/i', '', $_REQUEST['ontable']));
             if (!is_a($t, 'DB_DataObject') && !is_a($t, 'PDO_DataObject')) {
                 $this->jerr("invalid URL");