Changeset 17384 for branches/version-2/data

Timestamp:

2008/06/30 13:57:32 (18 years ago)

Author:

satou

Message:

#315 商品一覧の脆弱性対策を施しました。

File:

• branches/version-2/data/class/pages/products/LC_Page_Products_List.php (modified) (1 diff)

branches/version-2/data/class/pages/products/LC_Page_Products_List.php

@@ -608 +608 @@
         $classcategory_id_2 = $classcategory_id . "_2";
         if (!isset($classcategory_id_2)) $classcategory_id_2 = "";
-        if (!isset($_POST[$classcategory_id_2])) $_POST[$classcategory_id_2] = "";
+        if (!isset($_POST[$classcategory_id_2]) || !is_numeric($_POST[$classcategory_id_2])) $_POST[$classcategory_id_2] = "";
 
         $this->tpl_onload .= "lnSetSelect('" . $classcategory_id ."_1', "