Project

General

Profile

« Previous | Next » 

Revision 1384

Added by Dietmar over 13 years ago

Security fix in admin/pages

View differences:

sections.php
27 27
}
28 28

  
29 29
// Get page id
30
if(!isset($_GET['page_id']) OR !is_numeric($_GET['page_id']))
30
if(!isset($_GET['page_id']) || !is_numeric($_GET['page_id']))
31 31
{
32 32
	header("Location: index.php");
33 33
	exit(0);
......
42 42
$admin = new admin('Pages', 'pages_modify');
43 43

  
44 44
// Check if we are supposed to add or delete a section
45
if(isset($_GET['section_id']) AND is_numeric($_GET['section_id']))
45
if(isset($_GET['section_id']) && is_numeric($_GET['section_id']))
46 46
{
47 47
	// Get more information about this section
48 48
	$section_id = $_GET['section_id'];
......
157 157
	require($template_location);
158 158
}
159 159
// Check if $menu is set
160
if(!isset($block[1]) OR $block[1] == '')
160
if(!isset($block[1]) || $block[1] == '')
161 161
{
162 162
	// Make our own menu list
163 163
	$block[1] = $TEXT['MAIN'];
......
197 197
				'TEXT_ACTIONS' => $TEXT['ACTIONS'],
198 198
				'ADMIN_URL' => ADMIN_URL,
199 199
				'WB_URL' => WB_URL,
200
				'WB_PATH' => WB_PATH,
201 200
				'THEME_URL' => THEME_URL
202 201
				) 
203 202
			);

Also available in: Unified diff