print_order.php - Warnung bei unbekannter orders_id

[web-looks.de]

Log-Meldung leider nicht mehr vorhanden. Nachstellbar wenn $_GET['oID'] leer ist.

Vorschlag zur Korrektur:

/print_order.php

Suchen nach:

$oID = (int) $_GET['oID'];

Ersetzen mit:

$oID = (!empty($_GET['oID']) ? (int)$_GET['oID'] : 0);
$customer_id = (!empty($_SESSION['customer_id']) ? (int)$_SESSION['customer_id'] : (!empty($_SESSION['customer_gid']) ? (int)$_SESSION['customer_gid'] : 0));

Suchen nach:

if ((isset($_SESSION['customer_id']) && $_SESSION['customer_id'] == $order_check['customers_id']) 
    || (isset($_SESSION['customer_gid']) && $_SESSION['customer_gid'] == $order_check['customers_id'])
    ) 
{

Ersetzen mit:

if (!empty($customer_id)
	&& !empty($order_check['customers_id'])
	&& $customer_id == $order_check['customers_id']
) {

[Gerhard Waldemair]

In 14817:

fix #2316 - check for valid oID in print order