qemudb/commentview.php

<?php
/************************************************************/
/* view comments                                            */
/*                                                          */
/* script expects appId, versionId and threadId as argument */
/************************************************************/

/*
 * application environment
 */
include("path.php");
include(BASE."include/incl.php");
require_once(BASE."include/comment.php");

$aClean = array(); //array of filtered user input

$aClean['iAppId'] = makeSafe($_REQUEST['iAppId']);
$aClean['iVersionId'] = makeSafe($_REQUEST['iVersionId']);
$aClean['iThreadId'] = makeSafe($_REQUEST['iThreadId']);

apidb_header("Comments");


if(!is_numeric($aClean['iAppId']) OR !is_numeric($aClean['iVersionId']) OR (!empty($aClean['iThreadId']) AND !is_numeric($aClean['iThreadId'])))
    util_show_error_page_and_exit("Wrong IDs");

view_app_comments($aClean['iVersionId'], $aClean['iThreadId']);

apidb_footer();
?>
- replaced tons of tabs with spaces - replaced <? with <?php for compatibility sake (see TODO and CODING_STANDARD to know more) - improved overall code lisibility 2004-12-12 03:51:51 +00:00			`<?php`
			`/************************************************************/`
			`/* view comments */`
			`/* */`
			`/* script expects appId, versionId and threadId as argument */`
			`/************************************************************/`
Initial revision 2004-03-15 16:22:00 +00:00
Uniform headers 2004-12-25 20:08:00 +00:00			`/*`
Fix header patch typo 2004-12-27 23:54:55 +00:00			`* application environment`
Uniform headers 2004-12-25 20:08:00 +00:00			`*/`
Initial revision 2004-03-15 16:22:00 +00:00			`include("path.php");`
- new Comment class - improved performances (much less duplicated mysql queries) - less code and better error handling - informs the whole thread when posting new comment - fix various bugs 2005-02-02 03:01:29 +00:00			`include(BASE."include/incl.php");`
Fix display of comments when a threaded comment is clicked on in threaded comment mode. We were passing in one too many parameters to a function call and including comment.php multiple times. 2005-08-24 00:29:34 +00:00			`require_once(BASE."include/comment.php");`
Initial revision 2004-03-15 16:22:00 +00:00
Filter all user input to reduce the security impact of manipulated data 2006-06-17 06:10:10 +00:00			`$aClean = array(); //array of filtered user input`

Prefix all GPC variables according to our coding standard 2006-07-06 17:27:54 +00:00			`$aClean['iAppId'] = makeSafe($_REQUEST['iAppId']);`
			`$aClean['iVersionId'] = makeSafe($_REQUEST['iVersionId']);`
			`$aClean['iThreadId'] = makeSafe($_REQUEST['iThreadId']);`
Filter all user input to reduce the security impact of manipulated data 2006-06-17 06:10:10 +00:00
Initial revision 2004-03-15 16:22:00 +00:00			`apidb_header("Comments");`

Filter all user input to reduce the security impact of manipulated data 2006-06-17 06:10:10 +00:00
Prefix all GPC variables according to our coding standard 2006-07-06 17:27:54 +00:00			`if(!is_numeric($aClean['iAppId']) OR !is_numeric($aClean['iVersionId']) OR (!empty($aClean['iThreadId']) AND !is_numeric($aClean['iThreadId'])))`
Rename util_show_error_page() to util_show_error_page_and_exit() and redirect() to util_redirect_and_exit() so it is explicit that we exit in those functions that so we know it isn't necessary to put an exit after we call them 2006-07-06 18:44:56 +00:00			`util_show_error_page_and_exit("Wrong IDs");`
Use super globals, perform input checking 2005-01-29 00:47:36 +00:00
Prefix all GPC variables according to our coding standard 2006-07-06 17:27:54 +00:00			`view_app_comments($aClean['iVersionId'], $aClean['iThreadId']);`
Initial revision 2004-03-15 16:22:00 +00:00
			`apidb_footer();`
			`?>`