On Sun, 2010-04-11 at 11:57 +1000, Craig Small wrote: > On Sat, 2010-04-10 at 18:44 -0700, Eric Wheeler wrote: > > It seems that when a POST is performed that the admin_structure gets > > lost and is expected in $_GET later. So, if $_GET is missing the entry, > > I assume it is in $_POST and update $_GET. See the 2-liner below. > Is that's where it's coming from? Make sense why I (and others) never > see it while other people get dogged by it all the time. Whether or not > you get to see this problem depends on your PHP setup. > > The patch is pretty simple, really all input should be handled the same > way and tested for limits etc [...]
The earlier in the code this can be pushed in execution, the better. Ideally you would want those two lines just /before/ doing input validation on $_GET and friends. Do you know where that might be? -Eric ------------------------------------------------------------------------------ Download Intel® Parallel Studio Eval Try the new software tools for yourself. Speed compiling, find bugs proactively, and fine-tune applications for parallel performance. See why Intel Parallel Studio got high marks during beta. http://p.sf.net/sfu/intel-sw-dev _______________________________________________ jffnms-users mailing list jffnms-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/jffnms-users
