Changeset 22916 for branches/version-2_13-dev/data/class/pages/admin/contents/LC_Page_Admin_Contents_RecommendSearch.php

Timestamp:

2013/06/28 15:28:20 (11 years ago)

Author:

shutta

Message:

#2264 (おすすめ商品検索画面にエスケープ漏れの項目がある)
r22861(脆弱性対応)を2_13-devにもコミット。

File:

• branches/version-2_13-dev/data/class/pages/admin/contents/LC_Page_Admin_Contents_RecommendSearch.php (modified) (2 diffs)

branches/version-2_13-dev/data/class/pages/admin/contents/LC_Page_Admin_Contents_RecommendSearch.php

@@ -70 +70 @@
         $objFormParam->setParam($_POST);
         $objFormParam->convParam();
+
+        $rank = intval($_GET['rank']);
 
         switch ($this->getMode()) {
@@ -102 +104 @@
         // カテゴリ取得
         $this->arrCatList = $objDb->sfGetCategoryList();
+        $this->rank       = $rank;
         $this->setTemplate('contents/recommend_search.tpl');
     }