adam/Piwigo
1
0
Fork 0
mirror of https://github.com/Piwigo/Piwigo.git synced 2026-06-02 04:15:05 +02:00
Code Issues Packages Projects Releases Wiki Activity

fixes #2197 pwg.users.getList check user input min_register/max_register

Browse Source
This commit is contained in:
plegall
2024-10-28 18:45:04 +01:00
parent 65dce73ef8
commit 724a40f316
1 changed files with 10 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
include/ws_functions/pwg.users.php
+10
View File
@@ -77,6 +77,11 @@ function ws_users_getList($params, &$service)
if (!empty($params['min_register'])) { if (!empty($params['min_register'])) {
if (!preg_match('/^\d\d\d\d(-\d{1,2}){0,2}$/', $params['min_register']))
{
return new PwgError(WS_ERR_INVALID_PARAM, 'Invalid input parameter min_register');
}
$date_tokens = explode('-', $params['min_register']); $date_tokens = explode('-', $params['min_register']);
$min_register_year = $date_tokens[0]; $min_register_year = $date_tokens[0];
$min_register_month = $date_tokens[1] ?? 1; $min_register_month = $date_tokens[1] ?? 1;
@@ -87,6 +92,11 @@ function ws_users_getList($params, &$service)
if (!empty($params['max_register'])) { if (!empty($params['max_register'])) {
if (!preg_match('/^\d\d\d\d(-\d{1,2}){0,2}$/', $params['max_register']))
{
return new PwgError(WS_ERR_INVALID_PARAM, 'Invalid input parameter max_register');
}
$max_date_tokens = explode('-', $params['max_register']); $max_date_tokens = explode('-', $params['max_register']);
$max_register_year = $max_date_tokens[0]; $max_register_year = $max_date_tokens[0];
$max_register_month = $max_date_tokens[1] ?? 12; $max_register_month = $max_date_tokens[1] ?? 12;