Changeset 9323 for extensions/AdditionalPages/admin/add_page.inc.php

Timestamp:

Feb 20, 2011, 1:14:40 PM (13 years ago)

Author:

patdenice

Message:

Use another $conf parameter to avoid conflicts.
Add htmlspecialchars in admin page.

File:

• extensions/AdditionalPages/admin/add_page.inc.php (modified) (6 diffs)

extensions/AdditionalPages/admin/add_page.inc.php

@@ -56 +56 @@
 
   $user_access = 'NULL';
-  if ($conf['additional_pages']['user_perm'])
+  if ($conf['AP']['user_perm'])
   {
     $user_access = !empty($_POST['users']) ? '"'.implode(',', $_POST['users']).'"' : '""';
@@ -104 +104 @@
 
     // Homepage
-    if (isset($_POST['homepage']) xor $conf['additional_pages']['homepage'] == $edited_page['id'])
-    {
-      $conf['additional_pages']['homepage'] = isset($_POST['homepage']) ? $edited_page['id'] : null;
-      conf_update_param('additional_pages', pwg_db_real_escape_string(serialize($conf['additional_pages'])));
+    if (isset($_POST['homepage']) xor $conf['AP']['homepage'] == $edited_page['id'])
+    {
+      $conf['AP']['homepage'] = isset($_POST['homepage']) ? $edited_page['id'] : null;
+      conf_update_param('additional_pages', pwg_db_real_escape_string(serialize($conf['AP'])));
     }
 
@@ -152 +152 @@
 
 // Groups options
-if ($conf['additional_pages']['group_perm'])
+if ($conf['AP']['group_perm'])
 {
         $query = 'SELECT id, name FROM '.GROUPS_TABLE.' ORDER BY name ASC;';
@@ -169 +169 @@
 
 // Users options
-if ($conf['additional_pages']['user_perm'])
+if ($conf['AP']['user_perm'])
 {
   $users_id = array('guest', 'generic', 'normal', 'admin', 'webmaster');
@@ -185 +185 @@
 
 // User level options
-if ($conf['additional_pages']['level_perm'])
+if ($conf['AP']['level_perm'])
 {
   foreach ($conf['available_permission_levels'] as $level)
@@ -201 +201 @@
 $template->assign(array(
   'AP_TITLE' => $page_title,
-  'NAME' => $edited_page['title'],
-  'PERMALINK' => $edited_page['permalink'],
+  'NAME' => htmlspecialchars($edited_page['title']),
+  'PERMALINK' => htmlspecialchars($edited_page['permalink']),
   'HOMEPAGE' => $edited_page['homepage'],
   'STANDALONE' => $edited_page['standalone'],
-  'CONTENT' => $edited_page['content']));
+  'CONTENT' => htmlspecialchars($edited_page['content'])
+  )
+);
 
 $template->set_filename('plugin_admin_content', dirname(__FILE__) . '/template/add_page.tpl');