adam/Piwigo
1
0
Fork 0
mirror of https://github.com/Piwigo/Piwigo.git synced 2026-07-04 00:42:20 +02:00
Code Issues Packages Projects Releases Wiki Activity

fixes #1009 check group_selection parameter to be only an array of ids

Browse Source
This commit is contained in:
plegall
2019-08-12 14:25:56 +02:00
parent 776f8fa186
commit 4932bc502b
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
admin/group_list.php
+2 -1
View File
@@ -51,7 +51,7 @@ if (isset($_POST['submit_add']))
$query = '
SELECT COUNT(*)
FROM `'.GROUPS_TABLE.'`
WHERE name = \''.$_POST['groupname'].'\'
WHERE name = \''.pwg_db_real_escape_string($_POST['groupname']).'\'
;';
list($count) = pwg_db_fetch_row(pwg_query($query));
if ($count != 0)
@@ -82,6 +82,7 @@ INSERT INTO `'.GROUPS_TABLE.'`
// +-----------------------------------------------------------------------+
if (isset($_POST['submit']) and isset($_POST['selectAction']) and isset($_POST['group_selection']))
{
check_input_parameter('group_selection', $_POST, true, PATTERN_ID);
// if the user tries to apply an action, it means that there is at least 1
// photo in the selection
$groups = $_POST['group_selection'];