merge r30952 from trunk to branch 2.7

bug 3202 fixed: additional input check for filter_level


git-svn-id: http://piwigo.org/svn/branches/2.7@30953 68402e56-0260-453c-a942-63ccdbb3a9ee
This commit is contained in:
plegall
2015-02-12 14:39:36 +00:00
parent c0608565da
commit cd74b8548f

View File

@@ -116,6 +116,8 @@ if (isset($_POST['submitFilter']))
if (isset($_POST['filter_level_use']))
{
check_input_parameter('filter_level', $_POST, false, '/^\d+$/');
if (in_array($_POST['filter_level'], $conf['available_permission_levels']))
{
$_SESSION['bulk_manager_filter']['level'] = $_POST['filter_level'];