james/fembooru
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

some escapes

Browse Source
This commit is contained in:
Shish 2009-11-15 06:31:18 +00:00
parent b797b97595
commit 57b2a4df9e
1 changed files with 4 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
contrib/pools/main.php
View File

@ -217,7 +217,7 @@ class Pools extends SimpleExtension {
} }
case "nuke": case "nuke":
{ {
$pool_id = $event->get_arg(1); $pool_id = int_escape($event->get_arg(1));
$pool = $this->get_single_pool($pool_id); $pool = $this->get_single_pool($pool_id);
// only admins and owners may do this // only admins and owners may do this
@ -277,7 +277,7 @@ class Pools extends SimpleExtension {
private function list_pools(Page $page, $event) { private function list_pools(Page $page, $event) {
global $config, $database; global $config, $database;
$pageNumber = $event->get_arg(1); $pageNumber = int_escape($event->get_arg(1));
if(is_null($pageNumber) || !is_numeric($pageNumber)) if(is_null($pageNumber) || !is_numeric($pageNumber))
$pageNumber = 0; $pageNumber = 0;
else if ($pageNumber <= 0) else if ($pageNumber <= 0)
@ -366,7 +366,7 @@ class Pools extends SimpleExtension {
$poolsMaxResults = $config->get_int("poolsMaxImportResults", 1000); $poolsMaxResults = $config->get_int("poolsMaxImportResults", 1000);
$images = $images = Image::find_images(0, $poolsMaxResults, Tag::explode($pool_tag)); $images = Image::find_images(0, $poolsMaxResults, Tag::explode($pool_tag));
$this->theme->pool_result($page, $images, $pool_id); $this->theme->pool_result($page, $images, $pool_id);
} }
@ -382,7 +382,6 @@ class Pools extends SimpleExtension {
$images = ""; $images = "";
foreach ($_POST['check'] as $imageID) { foreach ($_POST['check'] as $imageID) {
if(!$this->check_post($poolID, $imageID)) { if(!$this->check_post($poolID, $imageID)) {
$database->execute(" $database->execute("
INSERT INTO pool_images INSERT INTO pool_images
@ -393,7 +392,6 @@ class Pools extends SimpleExtension {
$images .= " ".$imageID; $images .= " ".$imageID;
} }
} }
if(!strlen($images) == 0) { if(!strlen($images) == 0) {
@ -668,8 +666,7 @@ class Pools extends SimpleExtension {
global $database; global $database;
$status = $database->get_all("SELECT * FROM pool_history WHERE id=?", array($historyID)); $status = $database->get_all("SELECT * FROM pool_history WHERE id=?", array($historyID));
foreach ($status as $entry) foreach ($status as $entry) {
{
$images = trim($entry['images']); $images = trim($entry['images']);
$images = explode(" ", $images); $images = explode(" ", $images);
$poolID = $entry['pool_id']; $poolID = $entry['pool_id'];