aboutsummaryrefslogtreecommitdiffstats
path: root/admin
diff options
context:
space:
mode:
authorplegall <plg@piwigo.org>2015-02-12 14:39:09 +0000
committerplegall <plg@piwigo.org>2015-02-12 14:39:09 +0000
commit6de82cb36fdbe5df241c4d053175dae620c76c54 (patch)
treea6142afa06b89ee1a7a630b130dc02efaf9de3ee /admin
parent3c28040ca8c07586ce1498241503c0fbcf75c569 (diff)
bug 3202 fixed: additional input check for filter_level
git-svn-id: http://piwigo.org/svn/trunk@30952 68402e56-0260-453c-a942-63ccdbb3a9ee
Diffstat (limited to 'admin')
-rw-r--r--admin/batch_manager.php2
1 files changed, 2 insertions, 0 deletions
diff --git a/admin/batch_manager.php b/admin/batch_manager.php
index bd64437c8..257b11bb9 100644
--- a/admin/batch_manager.php
+++ b/admin/batch_manager.php
@@ -116,6 +116,8 @@ if (isset($_POST['submitFilter']))
if (isset($_POST['filter_level_use']))
{
+ check_input_parameter('filter_level', $_POST, false, '/^\d+$/');
+
if (in_array($_POST['filter_level'], $conf['available_permission_levels']))
{
$_SESSION['bulk_manager_filter']['level'] = $_POST['filter_level'];