diff options
| author | plegall <plg@piwigo.org> | 2010-03-19 22:25:39 +0000 |
|---|---|---|
| committer | plegall <plg@piwigo.org> | 2010-03-19 22:25:39 +0000 |
| commit | c695136e4d75695178a9fc848a7cf6bfa2b9346c (patch) | |
| tree | efba21de4995d7bd6b2f792e6d118a8e6e6bd405 /admin/photos_add_direct.php | |
| parent | ff7e537e2b4bceaef241096a377d12af4b917c43 (diff) | |
bug 1328: backport the pwg_token on trunk
bug 1329: backport the check_input_parameter on trunk
feature 1026: add pwg_token feature for edit/delete comment. Heavy refactoring
on this feature to make the code simpler and easier to maintain (I hope).
git-svn-id: http://piwigo.org/svn/trunk@5195 68402e56-0260-453c-a942-63ccdbb3a9ee
Diffstat (limited to 'admin/photos_add_direct.php')
| -rw-r--r-- | admin/photos_add_direct.php | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/admin/photos_add_direct.php b/admin/photos_add_direct.php index 4fceb6b12..0c24fc6ef 100644 --- a/admin/photos_add_direct.php +++ b/admin/photos_add_direct.php @@ -30,7 +30,7 @@ if (!defined('PHOTOS_ADD_BASE_URL')) if (isset($_GET['batch'])) { - check_input_parameter('batch', $_GET['batch'], false, '/^\d+(,\d+)*$/'); + check_input_parameter('batch', $_GET, false, '/^\d+(,\d+)*$/'); $query = ' DELETE FROM '.CADDIE_TABLE.' @@ -347,7 +347,7 @@ $template->assign( 'switch_url' => PHOTOS_ADD_BASE_URL.'&upload_mode='.$upload_switch, 'upload_id' => md5(rand()), 'session_id' => session_id(), - 'pwg_token' => '1234abcd5678efgh',// get_pwg_token(), + 'pwg_token' => get_pwg_token(), ) ); |