From 197e80add6532b8470c6805131c88b91d5f714ea Mon Sep 17 00:00:00 2001 From: Andrew Dolgov Date: Tue, 4 Dec 2018 10:47:01 +0300 Subject: fix several issues related to profile being set to a non-numeric value --- classes/db/prefs.php | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) (limited to 'classes/db/prefs.php') diff --git a/classes/db/prefs.php b/classes/db/prefs.php index 70d8b24c0..1fddd27c5 100644 --- a/classes/db/prefs.php +++ b/classes/db/prefs.php @@ -26,7 +26,7 @@ class Db_Prefs { $user_id = $_SESSION["uid"]; @$profile = $_SESSION["profile"]; - if (!$profile || get_schema_version() < 63) $profile = null; + if (!is_numeric($profile) || !$profile || get_schema_version() < 63) $profile = null; $sth = $this->pdo->prepare("SELECT value,ttrss_prefs_types.type_name as type_name,ttrss_prefs.pref_name AS pref_name @@ -65,7 +65,7 @@ class Db_Prefs { return $this->convert($tuple["value"], $tuple["type"]); } - if (!$profile || get_schema_version() < 63) $profile = null; + if (!is_numeric($profile) || !$profile || get_schema_version() < 63) $profile = null; $sth = $this->pdo->prepare("SELECT value,ttrss_prefs_types.type_name as type_name @@ -112,9 +112,11 @@ class Db_Prefs { if (!$user_id) { $user_id = $_SESSION["uid"]; @$profile = $_SESSION["profile"]; + } else { + $profile = null; } - if (!$profile || get_schema_version() < 63) $profile = null; + if (!is_numeric($profile) || !$profile || get_schema_version() < 63) $profile = null; $type_name = ""; $current_value = ""; -- cgit v1.2.3-54-g00ecf