Modify ↓

Opened 3 years ago

Closed 3 years ago

#2315 closed Bug/Fehler (fixed)

popup_content.php - Prüfung ob $_GET['coID'] existiert kommt zu spät

Reported by: web-looks.de Owned by: somebody
Priority: normal Milestone: modified-shop-2.0.8.0
Component: Shop Version: 2.0.7.2
Keywords: Cc:
Blocked By: Blocking:

Description

Vorschlag zur Korrektur:

popup_content.php

Suchen nach:

$content_data = $main->getContentData((int)$_GET['coID'], '', '', (isset($_GET['preview']) ? true : false));

if (!isset($_GET['coID']) || $_GET['coID'] == '' || count($content_data) < 1) {
  die('Direct Access to this location is not allowed.');
}

Ersetzen mit:

$content_data = array();
if (!empty($_GET['coID'])) {
	$content_data = $main->getContentData((int)$_GET['coID'], '', '', (isset($_GET['preview']) ? true : false));
}

if (empty($content_data)) {
  die('Direct Access to this location is not allowed.');
}

Attachments (0)

Change History (1)

comment:1 by Gerhard Waldemair, 3 years ago

Resolution: → fixed
Status: new → closed

In 14775:

fix #2315 - check for coID parameter

Modify Ticket

Action
as closed The owner will remain somebody.
The resolution will be deleted. Next status will be 'reopened'.

Add Comment
E-mail address and name can be saved in the Preferences .
Attachments ↑ Description ↑
 
Note: See TracTickets for help on using tickets.