claunia/qemudb
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix and enable input filtering through include/filter.php

Browse Source
This commit is contained in:
Chris Morgan
2007-01-04 02:35:01 +00:00
committed by WineHQ
parent 582ee561fc
commit a1a41d6b87
58 changed files with 129 additions and 385 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
admin/editAppNote.php
View File

@@ -7,13 +7,6 @@ require("path.php");
require(BASE."include/incl.php");
require_once(BASE."include/note.php");
$aClean = array(); //array of filtered user input
$aClean['iNoteId'] = makeSafe($_REQUEST['iNoteId']);
$aClean['sSub'] = makeSafe($_REQUEST['sSub']);
$aClean['sSubmit'] = makeSafe($_REQUEST['sSubmit']);
$aClean['sPreview'] = makeSafe($_REQUEST['sPreview']);
if(!is_numeric($aClean['iNoteId']))
util_show_error_page_and_exit('Wrong note ID');
@@ -26,7 +19,7 @@ if(!$_SESSION['current']->hasPriv("admin") && !$_SESSION['current']->isMaintaine
if(!empty($aClean['sSub']))
{
$oNote->GetOutputEditorValues($_REQUEST); /* retrieve the updated values */
$oNote->GetOutputEditorValues($aClean); /* retrieve the updated values */
if ($aClean['sSub'] == 'Delete')
{
@@ -45,7 +38,7 @@ if(!empty($aClean['sSub']))
/* if preview is set display the note for review */
if($aClean['sPreview'])
{
$oNote->GetOutputEditorValues($_REQUEST); /* retrieve the updated values */
$oNote->GetOutputEditorValues($aClean); /* retrieve the updated values */
$oNote->show(true);
}