id	summary	reporter	owner	description	type	status	priority	milestone	component	version	resolution	keywords	cc	blockedby	blocking
2316	print_order.php - Warnung bei unbekannter orders_id	web-looks.de	somebody	"Log-Meldung leider nicht mehr vorhanden. Nachstellbar wenn {{{$_GET['oID']}}} leer ist.

Vorschlag zur Korrektur:

'''/print_order.php'''

Suchen nach:

{{{
$oID = (int) $_GET['oID'];
}}}

Ersetzen mit:

{{{
$oID = (!empty($_GET['oID']) ? (int)$_GET['oID'] : 0);
$customer_id = (!empty($_SESSION['customer_id']) ? (int)$_SESSION['customer_id'] : (!empty($_SESSION['customer_gid']) ? (int)$_SESSION['customer_gid'] : 0));
}}}

Suchen nach:

{{{
if ((isset($_SESSION['customer_id']) && $_SESSION['customer_id'] == $order_check['customers_id']) 
    || (isset($_SESSION['customer_gid']) && $_SESSION['customer_gid'] == $order_check['customers_id'])
    ) 
{
}}}

Ersetzen mit:

{{{
if (!empty($customer_id)
	&& !empty($order_check['customers_id'])
	&& $customer_id == $order_check['customers_id']
) {
}}}"	Bug/Fehler	closed	normal	modified-shop-2.0.8.0	Shop	2.0.7.2	fixed