From 197e80add6532b8470c6805131c88b91d5f714ea Mon Sep 17 00:00:00 2001 From: Andrew Dolgov Date: Tue, 4 Dec 2018 10:47:01 +0300 Subject: fix several issues related to profile being set to a non-numeric value --- classes/pref/prefs.php | 13 ++++++++----- 1 file changed, 8 insertions(+), 5 deletions(-) (limited to 'classes/pref/prefs.php') diff --git a/classes/pref/prefs.php b/classes/pref/prefs.php index 41beabb9e..5a787bb0c 100644 --- a/classes/pref/prefs.php +++ b/classes/pref/prefs.php @@ -452,12 +452,16 @@ class Pref_Prefs extends Handler_Protected { print '
'; - if ($_SESSION["profile"]) { + $profile = $_SESSION["profile"]; + + if (!is_numeric($profile) || !$profile || get_schema_version() < 63) $profile = null; + + if ($profile) { print_notice(__("Some preferences are only available in default profile.")); } if ($_SESSION["profile"]) { - initialize_user_prefs($_SESSION["uid"], $_SESSION["profile"]); + initialize_user_prefs($_SESSION["uid"], $profile); } else { initialize_user_prefs($_SESSION["uid"]); } @@ -473,7 +477,7 @@ class Pref_Prefs extends Handler_Protected { ttrss_user_prefs.pref_name = ttrss_prefs.pref_name AND owner_uid = :uid ORDER BY ttrss_prefs_sections.order_id,pref_name"); - $sth->execute([":uid" => $_SESSION['uid'], ":profile" => $_SESSION['profile']]); + $sth->execute([":uid" => $_SESSION['uid'], ":profile" => $profile]); $lnum = 0; @@ -497,8 +501,7 @@ class Pref_Prefs extends Handler_Protected { if (!$short_desc) continue; - if ($_SESSION["profile"] && in_array($line["pref_name"], - $profile_blacklist)) { + if ($profile && in_array($line["pref_name"], $profile_blacklist)) { continue; } -- cgit v1.2.3-54-g00ecf