Changeset 4495 for branches/2.0/admin/picture_modify.php

Timestamp:

Dec 15, 2009, 1:33:57 AM (14 years ago)

Author:

plg

Message:

bug 1329 fixed: add a check_input_parameter function to prevent hacking
attempts.

File:

• branches/2.0/admin/picture_modify.php (modified) (1 diff)

branches/2.0/admin/picture_modify.php

@@ -34 +34 @@
 check_status(ACCESS_ADMINISTRATOR);
 
+check_input_parameter('image_id', $_GET['image_id'], false, PATTERN_ID);
+check_input_parameter('cat_id', @$_GET['cat_id'], false, PATTERN_ID);
+
 // +-----------------------------------------------------------------------+
 // |                          synchronize metadata                         |