From ebc3c2e2f7d9408db7e5335d63fdd2a003c3d79a Mon Sep 17 00:00:00 2001 From: rvelices Date: Thu, 16 Oct 2008 00:38:26 +0000 Subject: merge 2755 and 2756 from branch 2.0 to trunk - 2755 fix vulnerability http://www.milw0rm.com/exploits/6755 - 2756 security paranoia: protect session/remember me cookies from XSS attacks (works only if php>=5.2 and with IE/FF maybe others) git-svn-id: http://piwigo.org/svn/trunk@2757 68402e56-0260-453c-a942-63ccdbb3a9ee --- comments.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'comments.php') diff --git a/comments.php b/comments.php index 555986328..3db7485c8 100644 --- a/comments.php +++ b/comments.php @@ -65,7 +65,7 @@ $page['since'] = isset($_GET['since']) ? $_GET['since'] : 4; // $page['sort_by'] = 'date'; // if the form was submitted, it overloads default behaviour -if (isset($_GET['sort_by'])) +if (isset($_GET['sort_by']) and isset($sort_by[$_GET['sort_by']]) ) { $page['sort_by'] = $_GET['sort_by']; } @@ -74,7 +74,7 @@ if (isset($_GET['sort_by'])) // $page['sort_order'] = 'DESC'; // if the form was submitted, it overloads default behaviour -if (isset($_GET['sort_order'])) +if (isset($_GET['sort_order']) and isset($sort_order[$_GET['sort_order']])) { $page['sort_order'] = $_GET['sort_order']; } -- cgit v1.2.3