Changeset 5195 for trunk/admin/element_set_global.php

Timestamp:

Mar 19, 2010, 11:25:39 PM (14 years ago)

Author:

plg

Message:

bug 1328: backport the pwg_token on trunk

bug 1329: backport the check_input_parameter on trunk

feature 1026: add pwg_token feature for edit/delete comment. Heavy refactoring
on this feature to make the code simpler and easier to maintain (I hope).

File:

• trunk/admin/element_set_global.php (modified) (1 diff)

trunk/admin/element_set_global.php

@@ -43 +43 @@
 // |                         deletion form submission                      |
 // +-----------------------------------------------------------------------+
+
+// the $_POST['selection'] was already checked in element_set.php
+check_input_parameter('del_tags', $_POST, true, PATTERN_ID);
+check_input_parameter('associate', $_POST, false, PATTERN_ID);
+check_input_parameter('dissociate', $_POST, false, PATTERN_ID);
 
 if (isset($_POST['delete']))