diff options
| author | plegall <plg@piwigo.org> | 2010-03-19 22:25:39 +0000 |
|---|---|---|
| committer | plegall <plg@piwigo.org> | 2010-03-19 22:25:39 +0000 |
| commit | c695136e4d75695178a9fc848a7cf6bfa2b9346c (patch) | |
| tree | efba21de4995d7bd6b2f792e6d118a8e6e6bd405 /admin/element_set_global.php | |
| parent | ff7e537e2b4bceaef241096a377d12af4b917c43 (diff) | |
bug 1328: backport the pwg_token on trunk
bug 1329: backport the check_input_parameter on trunk
feature 1026: add pwg_token feature for edit/delete comment. Heavy refactoring
on this feature to make the code simpler and easier to maintain (I hope).
git-svn-id: http://piwigo.org/svn/trunk@5195 68402e56-0260-453c-a942-63ccdbb3a9ee
Diffstat (limited to '')
| -rw-r--r-- | admin/element_set_global.php | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/admin/element_set_global.php b/admin/element_set_global.php index 113b5b1f8..73cc720b0 100644 --- a/admin/element_set_global.php +++ b/admin/element_set_global.php @@ -43,6 +43,11 @@ check_status(ACCESS_ADMINISTRATOR); // | deletion form submission | // +-----------------------------------------------------------------------+ +// the $_POST['selection'] was already checked in element_set.php +check_input_parameter('del_tags', $_POST, true, PATTERN_ID); +check_input_parameter('associate', $_POST, false, PATTERN_ID); +check_input_parameter('dissociate', $_POST, false, PATTERN_ID); + if (isset($_POST['delete'])) { if (isset($_POST['confirm_deletion']) and 1 == $_POST['confirm_deletion']) |