adam/Piwigo
1
0
Fork 0
mirror of https://github.com/Piwigo/Piwigo.git synced 2026-06-02 04:15:05 +02:00
Code Issues Packages Projects Releases Wiki Activity

(cp 156825d2) fixes #1697 add checks on chronology URL parameters

Browse Source
This commit is contained in:
plegall
2022-09-28 14:41:22 +02:00
parent 67e377cafe
commit effce04258
1 changed files with 14 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
include/functions_url.inc.php
+14
View File
@@ -686,6 +686,11 @@ function parse_well_known_params_url($tokens, &$i)
array_shift($chronology_tokens); array_shift($chronology_tokens);
$page['chronology_style'] = $chronology_tokens[0]; $page['chronology_style'] = $chronology_tokens[0];
if (!in_array($page['chronology_style'], array('monthly', 'weekly')))
{
fatal_error('bad chronology field (style)');
}
array_shift($chronology_tokens); array_shift($chronology_tokens);
if ( count($chronology_tokens)>0 ) if ( count($chronology_tokens)>0 )
{ {
@@ -696,6 +701,15 @@ function parse_well_known_params_url($tokens, &$i)
array_shift($chronology_tokens); array_shift($chronology_tokens);
} }
$page['chronology_date'] = $chronology_tokens; $page['chronology_date'] = $chronology_tokens;
foreach ($page['chronology_date'] as $date_token)
{
// each date part must be an integer (number of the year, number of the month, number of the week or number of the day)
if (!preg_match('/^\d+$/', $date_token))
{
fatal_error('bad chronology field (date)');
}
}
} }
} }
elseif (preg_match('/^start-(\d+)/', $tokens[$i], $matches)) elseif (preg_match('/^start-(\d+)/', $tokens[$i], $matches))