gnh1201/seeddms-code
1
0
Fork 0
mirror of https://git.code.sf.net/p/seeddms/code synced 2025-02-06 15:14:58 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

trim various fields from post request

Browse Source
This commit is contained in:
Uwe Steinmann 2016-04-22 12:39:04 +02:00
parent 00e45dd63a
commit 258b58efd2
2 changed files with 7 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
op/op.AddDocument.php
View File

@ -55,12 +55,12 @@ if($settings->_quota > 0) {
} }
} }
$comment = $_POST["comment"]; $comment = trim($_POST["comment"]);
$version_comment = $_POST["version_comment"]; $version_comment = trim($_POST["version_comment"]);
if($version_comment == "" && isset($_POST["use_comment"])) if($version_comment == "" && isset($_POST["use_comment"]))
$version_comment = $comment; $version_comment = $comment;
$keywords = $_POST["keywords"]; $keywords = trim($_POST["keywords"]);
$categories = isset($_POST["categories"]) ? $_POST["categories"] : null; $categories = isset($_POST["categories"]) ? $_POST["categories"] : null;
if(isset($_POST["attributes"])) if(isset($_POST["attributes"]))
$attributes = $_POST["attributes"]; $attributes = $_POST["attributes"];
@ -265,7 +265,7 @@ for ($file_num=0;$file_num<count($_FILES["userfile"]["tmp_name"]);$file_num++){
} }
if ((count($_FILES["userfile"]["tmp_name"])==1)&&($_POST["name"]!="")) if ((count($_FILES["userfile"]["tmp_name"])==1)&&($_POST["name"]!=""))
$name = $_POST["name"]; $name = trim($_POST["name"]);
else $name = basename($userfilename); else $name = basename($userfilename);
/* Check if name already exists in the folder */ /* Check if name already exists in the folder */

6
op/op.EditDocument.php
View File

@ -50,9 +50,9 @@ if($document->isLocked()) {
} }
} }
$name = isset($_POST['name']) ? $_POST["name"] : ""; $name = isset($_POST['name']) ? trim($_POST["name"]) : "";
$comment = isset($_POST['comment']) ? $_POST["comment"] : ""; $comment = isset($_POST['comment']) ? trim($_POST["comment"]) : "";
$keywords = isset($_POST["keywords"]) ? $_POST["keywords"] : ""; $keywords = isset($_POST["keywords"]) ? trim($_POST["keywords"]) : "";
if(isset($_POST['categoryidform1'])) { if(isset($_POST['categoryidform1'])) {
$categories = explode(',', preg_replace('/[^0-9,]+/', '', $_POST["categoryidform1"])); $categories = explode(',', preg_replace('/[^0-9,]+/', '', $_POST["categoryidform1"]));
} elseif(isset($_POST["categories"])) { } elseif(isset($_POST["categories"])) {