bacula-web: Replaced all $_POST by safe values in bweb class

diff --git a/gui/bacula-web/includes/bweb.inc.php b/gui/bacula-web/includes/bweb.inc.php
index 43b3efd686ba25128b6e13e28868b19528d6e055..ea45ce3d336fd83dd758a43aa07a92501902df29 100644 (file)
--- a/gui/bacula-web/includes/bweb.inc.php
+++ b/gui/bacula-web/includes/bweb.inc.php
@@ -41,8 +41,9 @@ class Bweb
                $this->init_gettext();
                
                // Check catalog id
-               if( isset($_POST['catalog_id']) ) {
-                       $this->catalog_current_id = $_POST['catalog_id'];
+               $http_post = CHttp::getRequestVars($_POST);
+               if( isset( $http_post['catalog_id'] ) ) {
+                       $this->catalog_current_id = $http_post['catalog_id'];
                        $_SESSION['catalog_id'] = $this->catalog_current_id;
                }
                elseif( isset( $_SESSION['catalog_id'] ) )