diff options
author | plegall <plg@piwigo.org> | 2008-10-16 19:34:46 +0000 |
---|---|---|
committer | plegall <plg@piwigo.org> | 2008-10-16 19:34:46 +0000 |
commit | 4411169d1aa5e477c33794d213394bca591a43a3 (patch) | |
tree | 931f640ef0b6adcebdec7aec7503b56e9fd2af8d /comments.php | |
parent | 9598532f6734864fbf9112711cbd64d901361666 (diff) |
merge -c2755 from branch 2.0 to branch 1.7
- fix vulnerability http://www.milw0rm.com/exploits/6755
git-svn-id: http://piwigo.org/svn/branches/branch-1_7@2762 68402e56-0260-453c-a942-63ccdbb3a9ee
Diffstat (limited to '')
-rw-r--r-- | comments.php | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/comments.php b/comments.php index efcd7dfb5..dd722f588 100644 --- a/comments.php +++ b/comments.php @@ -69,7 +69,7 @@ $page['since'] = isset($_GET['since']) ? $_GET['since'] : 4; // $page['sort_by'] = 'date'; // if the form was submitted, it overloads default behaviour -if (isset($_GET['sort_by'])) +if (isset($_GET['sort_by']) and isset($sort_by[$_GET['sort_by']]) ) { $page['sort_by'] = $_GET['sort_by']; } @@ -78,7 +78,7 @@ if (isset($_GET['sort_by'])) // $page['sort_order'] = $sort_order['descending']; // if the form was submitted, it overloads default behaviour -if (isset($_GET['sort_order'])) +if (isset($_GET['sort_order']) and isset($sort_order[$_GET['sort_order']])) { $page['sort_order'] = $sort_order[$_GET['sort_order']]; } |