• R/O
  • HTTP
  • SSH
  • HTTPS

Commit

Tags
No Tags

Frequently used words (click to add to your profile)

javaandroidc++linuxc#objective-ccocoa誰得qtrubypythongamewindowsbathyscaphephpguic翻訳omegattwitterframeworktestbtronarduinovb.net計画中(planning stage)directxpreviewerゲームエンジンdom

PukiWiki


Commit MetaInfo

Revisão842ebb433d326f6bb667222d8a99e84ddf27257f (tree)
Hora2016-02-07 01:33:03
Autorumorigu <umorigu@gmai...>
Commiterumorigu

Mensagem de Log

Make sure page name is valid for tracker plugin action

Mudança Sumário

Diff

--- a/plugin/tracker.inc.php
+++ b/plugin/tracker.inc.php
@@ -114,6 +114,13 @@ function plugin_tracker_action()
114114 }
115115 // ページ名を決定
116116 $base = $post['_base'];
117+ if (!is_pagename($base))
118+ {
119+ return array(
120+ 'msg'=>'cannot write',
121+ 'body'=>'page name ('.htmlsc($base).') is not valid.'
122+ );
123+ }
117124 $num = 0;
118125 $name = (array_key_exists('_name',$post)) ? $post['_name'] : '';
119126 if (array_key_exists('_page',$post))