Просмотр исходного кода

Pagination Validation

Make sure it's not a negative or value of 0 in `$_GET['page']`, which
will cause an SQL error.
Adjokip 9 лет назад
Родитель
Сommit
f261b098ce

+ 3 - 3
modules/gamemanager/server_monitor.php

@@ -128,8 +128,8 @@ function exec_ogp_module() {
 	$stats_players = 0;
 	$stats_maxplayers = 0;
 	
-	$home_page = isset($_GET['page']) ? $_GET['page'] : 1;
-	$home_limit = isset($_GET['limit']) ? $_GET['limit'] : 10;
+	$home_page = (isset($_GET['page']) && (int)$_GET['page'] > 0) ? (int)$_GET['page'] : 1;
+	$home_limit = isset($_GET['limit']) ? (int)$_GET['limit'] : 10;
 	
 	if(hasValue($loggedInUserInfo) && is_array($loggedInUserInfo) && $loggedInUserInfo["users_page_limit"] && !hasValue($_GET['limit'])){
 		$home_limit = $loggedInUserInfo["users_page_limit"];
@@ -676,4 +676,4 @@ function exec_ogp_module() {
 	</script>
 	<?php
 }
-?>
+?>

+ 3 - 3
modules/user_admin/show_users.php

@@ -47,8 +47,8 @@ td.actions{
 function exec_ogp_module() {
     global $db, $loggedInUserInfo;
 	
-	$page_user = isset($_GET['page']) ? $_GET['page'] : 1;
-	$limit_user = isset($_GET['limit']) ? $_GET['limit'] : 10;
+	$page_user = (isset($_GET['page']) && (int)$_GET['page'] > 0) ? (int)$_GET['page'] : 1;
+	$limit_user = isset($_GET['limit']) ? (int)$_GET['limit'] : 10;
 	
 	if(hasValue($loggedInUserInfo) && is_array($loggedInUserInfo) && $loggedInUserInfo["users_page_limit"] && !hasValue($_GET['limit'])){
 		$limit_user = $loggedInUserInfo["users_page_limit"];
@@ -121,4 +121,4 @@ function exec_ogp_module() {
 		echo rtrim($pagination, ",");
 	}
 }
-?>
+?>

+ 3 - 3
modules/user_games/show_homes.php

@@ -27,8 +27,8 @@ function exec_ogp_module()
 {
 	global $db, $loggedInUserInfo;
 
-	$page_GameHomes = isset($_GET['page']) ? $_GET['page'] : 1;
-	$limit_GameHomes = isset($_GET['limit']) ? $_GET['limit'] : 10;
+	$page_GameHomes = (isset($_GET['page']) && (int)$_GET['page'] > 0) ? (int)$_GET['page'] : 1;
+	$limit_GameHomes = isset($_GET['limit']) ? (int)$_GET['limit'] : 10;
 	
 	if(hasValue($loggedInUserInfo) && is_array($loggedInUserInfo) && $loggedInUserInfo["users_page_limit"] && !hasValue($_GET['limit'])){
 		$limit_GameHomes = $loggedInUserInfo["users_page_limit"];
@@ -108,4 +108,4 @@ function exec_ogp_module()
 	</script>
 	<?php	
 }
-?>
+?>