mirror of
https://github.com/Piwigo/Piwigo.git
synced 2026-03-28 17:42:57 +01:00
better check on input parameters (got some odd hack attempts)
This commit is contained in:
@@ -91,9 +91,9 @@ $since_options = array(
|
||||
|
||||
trigger_notify('loc_begin_comments');
|
||||
|
||||
if (!empty($_GET['since']) && is_numeric($_GET['since']))
|
||||
if (!empty($_GET['since']))
|
||||
{
|
||||
$page['since'] = $_GET['since'];
|
||||
$page['since'] = intval($_GET['since']);
|
||||
}
|
||||
else
|
||||
{
|
||||
@@ -363,9 +363,9 @@ $template->assign( 'item_number_options_selected', $page['items_number']);
|
||||
// | navigation bar |
|
||||
// +-----------------------------------------------------------------------+
|
||||
|
||||
if (isset($_GET['start']) and is_numeric($_GET['start']))
|
||||
if (isset($_GET['start']))
|
||||
{
|
||||
$start = $_GET['start'];
|
||||
$start = intval($_GET['start']);
|
||||
}
|
||||
else
|
||||
{
|
||||
|
||||
Reference in New Issue
Block a user