Merge branch 'QA_4_6-security' into master-security

This commit is contained in:
Michal Čihař 2016-07-13 09:38:56 +02:00
commit 71ccd06aa9

View File

@ -34,9 +34,20 @@ $request_params = array(
'transform_key',
'where_clause'
);
$size_params = array(
'newHeight',
'newWidth',
);
foreach ($request_params as $one_request_param) {
if (isset($_REQUEST[$one_request_param])) {
$GLOBALS[$one_request_param] = $_REQUEST[$one_request_param];
if (in_array($one_request_param, $size_params)) {
$GLOBALS[$one_request_param] = intval($_REQUEST[$one_request_param]);
if ($GLOBALS[$one_request_param] > 2000) {
$GLOBALS[$one_request_param] = 2000;
}
} else {
$GLOBALS[$one_request_param] = $_REQUEST[$one_request_param];
}
}
}