Changeset 49987 in spip-zone

Timestamp:

Jul 26, 2011, 7:16:02 AM (10 years ago)

Author:

cedric@…

Message:

​http://core.spip.org/issues/2183 : ne pas perturber les criteres conditionnels en appliquant intval sur les valeurs vides

File:

• _core_/securite/ecran_securite.php (modified) (2 diffs)

_core_/securite/ecran_securite.php

@@ -6 +6 @@
  */
 
-define('_ECRAN_SECURITE', '1.0.4'); // 6 avr. 2011
+define('_ECRAN_SECURITE', '1.0.5'); // 26 juil. 2011
 
 /*
@@ -35 +35 @@
  */
 foreach ($_GET as $var => $val)
-        if (strncmp($var,"id_",3)==0 AND $var!='id_table')
+        if ($_GET[$var] AND strncmp($var,"id_",3)==0 AND $var!='id_table')
                 $_GET[$var] = is_array($_GET[$var])?@array_map('intval',$_GET[$var]):intval($_GET[$var]);
 foreach ($_POST as $var => $val)
-        if (strncmp($var,"id_",3)==0 AND $var!='id_table')
+        if ($_POST[$var] AND strncmp($var,"id_",3)==0 AND $var!='id_table')
                 $_POST[$var] = is_array($_POST[$var])?@array_map('intval',$_POST[$var]):intval($_POST[$var]);
 foreach ($GLOBALS as $var => $val)
-        if (strncmp($var,"id_",3)==0 AND $var!='id_table')
+        if ($GLOBALS[$var] AND strncmp($var,"id_",3)==0 AND $var!='id_table')
                 $GLOBALS[$var] = is_array($GLOBALS[$var])?@array_map('intval',$GLOBALS[$var]):intval($GLOBALS[$var]);