Project

General

Profile

« Previous | Next » 

Revision 286

Added by stefan almost 20 years ago

Added an exit call after every heading("Location:...") redirector to prevent unwanted execution of code.

View differences:

save.php
1 1 
<?php
2 2 

  		




  3
  
  
    
// $Id: save.php,v 1.4 2005/04/02 06:25:53 rdjurovich Exp $


  		




  
  3
  
    
// $Id$


  		




  4
  4
  
    

  		




  5
  5
  
    
/*


  		




  6
  6
  
    

  		




  ......




  34
  34
  
    
// Check if user id is a valid number and doesnt equal 1


  		




  35
  35
  
    
if(!isset($_POST['user_id']) OR !is_numeric($_POST['user_id']) OR $_POST['user_id'] == 1) {


  		




  36
  36
  
    
	header("Location: index.php");


  		




  
  37
  
    
	exit(0);


  		




  37
  38
  
    
} else {


  		




  38
  39
  
    
	$user_id = $_POST['user_id'];


  		




  39
  40
  
    
}


  		












Also available in:  Unified diff