X-Git-Url: http://git.harvie.cz/?a=blobdiff_plain;f=wwwroot%2Finc%2Feventz%2Fset_bookmark_category.inc;fp=wwwroot%2Finc%2Feventz%2Fset_bookmark_category.inc;h=26bb1ea9819615222696b54180a707abfe43aad2;hb=46c0767c5262746b930aeb4f0f30f86bbf5496a6;hp=159a0859ff08f528f8ffcf522fa24618d524c0b3;hpb=02a5a589ebdb65e72f8585908061a332949fcda5;p=mirrors%2FKyberia-bloodline.git diff --git a/wwwroot/inc/eventz/set_bookmark_category.inc b/wwwroot/inc/eventz/set_bookmark_category.inc index 159a085..26bb1ea 100644 --- a/wwwroot/inc/eventz/set_bookmark_category.inc +++ b/wwwroot/inc/eventz/set_bookmark_category.inc @@ -4,7 +4,12 @@ function set_bookmark_category() { global $node,$db,$error; $bookmarks=$_POST['bookmarks_chosen']; - $category_id=$_POST['bookmark_category_id']; + + if (isset($_POST['bookmark_category_id']) && + is_numeric($_POST['bookmark_category_id'])) { + $category_id=$_POST['bookmark_category_id']; + } + $new_parent=nodes::getNodeById($category_id,$_SESSION['user_id']); $new_parent_permissions=permissions::checkPermissions($new_parent); @@ -20,6 +25,11 @@ function set_bookmark_category() { foreach ($bookmarks as $chosen_id) { unset($chosen); + if (!is_numeric($chosen_id)) + { + $error=$error_messages['What a strange number..']; + return false; + } $db->query("start transaction");