Commit aeae2c84 authored by Phill Sparks's avatar Phill Sparks

Secure extracts

Updated extract calls to use EXTR_SKIP.
parent 34452f5f
...@@ -89,7 +89,7 @@ class Grammar { ...@@ -89,7 +89,7 @@ class Grammar {
foreach ($query->joins as $join) foreach ($query->joins as $join)
{ {
extract($join); extract($join, EXTR_SKIP);
list($column1, $column2) = array($this->wrap($column1), $this->wrap($column2)); list($column1, $column2) = array($this->wrap($column1), $this->wrap($column2));
......
...@@ -61,7 +61,7 @@ class Cookie implements Driver { ...@@ -61,7 +61,7 @@ class Cookie implements Driver {
*/ */
public function save($session, $config, $exists) public function save($session, $config, $exists)
{ {
extract($config); extract($config, EXTR_SKIP);
$payload = $this->crypter->encrypt(serialize($session)); $payload = $this->crypter->encrypt(serialize($session));
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment