sydney/kusaba-x
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fixed XSS issues in animation.php and manage.class.php

Browse Source 
git-svn-id: http://kusabax.cultnet.net/svn/repo/stable@285 73d99b7e-4f53-4972-b7b7-2ecd3c4d89ee
This commit is contained in:
Harrison committed 2011-04-27 23:26:02 +00:00
1 parent 2e05709a5f
commit f9231938bc
2 files changed
+77 -13
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

animation.php
+7 -1
View File
@@ -33,8 +33,14 @@ if (!isset($_GET['board']) || !isset($_GET['id'])) {
* Require the configuration file
*/
require 'config.php';
$imagesize = $tc_db->GetAll("SELECT `image_w`, `image_h` FROM `" . KU_DBPREFIX . "posts` WHERE `file` = " . $tc_db->qstr($_GET['id']) . " LIMIT 1");
$imagesize = $tc_db->GetAll("SELECT `image_w`, `image_h` FROM `posts` WHERE `file` = " . $tc_db->qstr($_GET['id']) . " LIMIT 1");
// Checks to ensure valid $_GET input
$board = $tc_db->GetAll("SELECT `desc` FROM `" . KU_DBPREFIX . "boards WHERE `desc` = " . $tc_db->qstr($_GET['board']) . " LIMIT 1");
if (count($board) < 1 || !is_numeric($_GET['id'])) {
die();
}
$width = $imagesize[0]['image_w'];
$height = $imagesize[0]['image_h'];