bug 1329 fixed: add a check_input_parameter function to prevent hacking

attempts.

git-svn-id: http://piwigo.org/svn/branches/2.0@4495 68402e56-0260-453c-a942-63ccdbb3a9ee
This commit is contained in:
plegall
2009-12-15 00:33:57 +00:00
parent 8bbbe6c794
commit 742e2a7c0a
6 changed files with 59 additions and 0 deletions
+3
View File
@@ -33,6 +33,9 @@ include_once(PHPWG_ROOT_PATH.'admin/include/functions.php');
// +-----------------------------------------------------------------------+
check_status(ACCESS_ADMINISTRATOR);
check_input_parameter('image_id', $_GET['image_id'], false, PATTERN_ID);
check_input_parameter('cat_id', @$_GET['cat_id'], false, PATTERN_ID);
// +-----------------------------------------------------------------------+
// | synchronize metadata |
// +-----------------------------------------------------------------------+