/** * Filter a request variable, containing a WHERE clause, from the globals * if it is blacklisted. * * @param string $variable * * @example filter_request_where_clause('atkselector') */ public static function filter_request_where_clause($variable) { if (isset($_REQUEST[$variable])) { $values = (array) $_REQUEST[$variable]; foreach ($values as $value) { $checker = new self($value); if (!$checker->isSafe()) { Tools::atkhalt('Unsafe WHERE clause in REQUEST variable: ' . $variable, 'critical'); } } } }