From 3bf8c07917a13b842855d78aadd97d20f1f9ed45 Mon Sep 17 00:00:00 2001
From: plegall <plg@piwigo.org>
Date: Mon, 9 Oct 2023 21:03:14 +0200
Subject: [PATCH] issue #1636 check new input parameter

---
 admin/batch_manager_global.php | 1 +
 1 file changed, 1 insertion(+)

diff --git a/admin/batch_manager_global.php b/admin/batch_manager_global.php
index 11cf4edfd..2d5b53791 100644
--- a/admin/batch_manager_global.php
+++ b/admin/batch_manager_global.php
@@ -51,6 +51,7 @@ if (isset($_POST['nb_photos_deleted']))
 }
 else if (isset($_POST['setSelected']))
 {
+  check_input_parameter('whole_set', $_POST, false, '/^\d+(,\d+)*$/');
   $collection = explode(',', $_POST['whole_set']);
 }
 else if (isset($_POST['selection']))