Attachment 231904 Details for Bug 262022 – Patch functions directory

[patch] Patch functions directory

patch-functions.diff (text/plain), 2.73 KB, created by Helmut Ritter on 2022-02-17 19:56:26 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Helmut Ritter

Created: 2022-02-17 19:56:26 UTC

Size: 2.73 KB

patch

obsolete

>--- functions/prepend_content.php.orig	2020-01-19 18:03:01.000000000 +0100
>+++ functions/prepend_content.php	2022-02-17 18:53:43.081225000 +0100
>@@ -64,9 +64,9 @@
> for ($i = 1; $i <= 23; $i++) {
>     $tmpVar  = 'chkTfValue'.$i;
>     $$tmpVar = filter_input(INPUT_POST, 'tfValue'.$i, FILTER_SANITIZE_STRING, FILTER_FLAG_NO_ENCODE_QUOTES);
>-    if (get_magic_quotes_gpc() == 0) {
>-        $$tmpVar = addslashes($$tmpVar);
>-    }
>+#    if (get_magic_quotes_gpc() == 0) {
>+    $$tmpVar = addslashes($$tmpVar);
>+#    }
>     if (isset($$tmpVar)) {
>         $$tmpVar = $myVisClass->tfSecure($$tmpVar);
>     }
>@@ -75,9 +75,9 @@
> for ($i = 1; $i <= 8; $i++) {
>     $tmpVar  = 'chkTfArg'.$i;
>     $$tmpVar = filter_input(INPUT_POST, 'tfArg'.$i, FILTER_UNSAFE_RAW);
>-    if (get_magic_quotes_gpc() == 0) {
>-        $$tmpVar = addslashes($$tmpVar);
>-    }
>+#    if (get_magic_quotes_gpc() == 0) {
>+    $$tmpVar = addslashes($$tmpVar);
>+#    }
>     if (isset($$tmpVar)) {
>         $$tmpVar = $myVisClass->tfSecure($$tmpVar);
>     }
>@@ -86,9 +86,9 @@
> for ($i = 1; $i <= 8; $i++) {
>     $tmpVar  = 'chkTaArg'.$i.'Info';
>     $$tmpVar = filter_input(INPUT_POST, 'taArg'.$i.'Info', FILTER_UNSAFE_RAW);
>-    if (get_magic_quotes_gpc() == 0) {
>-        $$tmpVar = addslashes($$tmpVar);
>-    }
>+#    if (get_magic_quotes_gpc() == 0) {
>+    $$tmpVar = addslashes($$tmpVar);
>+#    }
>     if (isset($$tmpVar)) {
>         $$tmpVar = $myVisClass->tfSecure($$tmpVar);
>     }
>@@ -99,12 +99,14 @@
>     $tmpVar2 = 'intMselValue'.$i;
>     $$tmpVar = filter_input(INPUT_POST, 'mselValue'.$i, FILTER_SANITIZE_STRING, FILTER_FORCE_ARRAY);
>     // Multiselect data processing
>-    if ((${$tmpVar}[0] == '') || (${$tmpVar}[0] == '0')) {
>-        $$tmpVar2 = 0;
>-    } elseif (${$tmpVar}[0] == '*') {
>-        $$tmpVar2 = 2;
>-    } else {
>-        $$tmpVar2 = 1;
>+    if (isset(${$tmpVar}[0])) {
>+        if ((${$tmpVar}[0] == '') || (${$tmpVar}[0] == '0')) {
>+            $$tmpVar2 = 0;
>+        } elseif (${$tmpVar}[0] == '*') {
>+            $$tmpVar2 = 2;
>+        } else {
>+            $$tmpVar2 = 1;
>+        }
>     }
> }
> // Common select field value
>@@ -157,12 +159,12 @@
> //
> // Quote special characters
> // ==========================
>-if (get_magic_quotes_gpc() == 0) {
>-    $chkTfSearchRaw    = addslashes($chkTfSearchRaw);
>-    $chkTaValue1Raw    = addslashes($chkTaValue1Raw);
>-    $chkTaFileTextRaw  = addslashes($chkTaFileTextRaw);
>-    $chkTfSpValue1     = addslashes($chkTfSpValue1);
>-}
>+#if (get_magic_quotes_gpc() == 0) {
>+$chkTfSearchRaw    = addslashes($chkTfSearchRaw);
>+$chkTaValue1Raw    = addslashes($chkTaValue1Raw);
>+$chkTaFileTextRaw  = addslashes($chkTaFileTextRaw);
>+$chkTfSpValue1     = addslashes($chkTfSpValue1);
>+#}
> //
> // Security function for text fields
> // =================================

Actions: View | Diff

Attachments on bug 262022: 231902 | 231903 | 231904 | 231921 | 231922