Beanz/flatpress
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fixes #180, possible XSS in entry list

Browse Source
This commit is contained in:
azett 2022-12-25 20:32:55 +01:00
parent 91857ec800
commit 229752b510
2 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
admin/panels/entry/admin.entry.list.php
View File

@ -39,6 +39,7 @@ class admin_entry_list extends AdminPanelActionValidated {
// parameters for the list // parameters for the list
// start offset and count (now defaults to 8...) // start offset and count (now defaults to 8...)
$this->smarty->assign('formtarget', strip_tags($_SERVER ['PHP_SELF']));
$this->smarty->assign('categories_all', entry_categories_get('defs')); $this->smarty->assign('categories_all', entry_categories_get('defs'));
$this->smarty->assign('saved_flags', entry_flags_get()); $this->smarty->assign('saved_flags', entry_flags_get());
@ -46,8 +47,9 @@ class admin_entry_list extends AdminPanelActionValidated {
global $fpdb; global $fpdb;
if (!empty($_REQUEST ['entry'])) if (!empty($_REQUEST ['entry'])) {
utils_redirect('admin.php?p=entry&action=write&entry=' . $_REQUEST ['entry']); utils_redirect('admin.php?p=entry&action=write&entry=' . $_REQUEST ['entry']);
}
isset($_REQUEST ['m']) ? $params ['m'] = $_REQUEST ['m'] : null; isset($_REQUEST ['m']) ? $params ['m'] = $_REQUEST ['m'] : null;
isset($_REQUEST ['y']) ? $params ['y'] = $_REQUEST ['y'] : null; isset($_REQUEST ['y']) ? $params ['y'] = $_REQUEST ['y'] : null;

2
admin/panels/entry/admin.entry.list.tpl
View File

@ -25,7 +25,7 @@
<p>{$panelstrings.descr}</p> <p>{$panelstrings.descr}</p>
<form method="get" action="{$smarty.server.PHP_SELF}?p=entry"> <form method="get" action="{$formtarget}?p=entry">
<p> <input type="hidden" name="p" value="entry" /> </p> <p> <input type="hidden" name="p" value="entry" /> </p>
<fieldset><legend>{$panelstrings.filter}</legend> <fieldset><legend>{$panelstrings.filter}</legend>
<select name="category" class="alignleft"> <select name="category" class="alignleft">