Changeset 934 for trunk/picture.php

Timestamp:

Nov 16, 2005, 10:18:56 PM (18 years ago)

Author:

plg

Message:

• bug 207 fixed : security issue. Any visitor can reach any picture in picture.php only by deleting value for URL parameter "cat".

File:

• trunk/picture.php (modified) (1 diff)

trunk/picture.php

@@ -32 +32 @@
 //-------------------------------------------------- access authorization check
 check_cat_id( $_GET['cat'] );
+
+if (!isset($page['cat']))
+{
+  die($lang['access_forbiden']);
+}
+
 check_login_authorization();
 if ( isset( $page['cat'] ) and is_numeric( $page['cat'] ) )