X-Git-Url: http://git.harvie.cz/?a=blobdiff_plain;f=wwwroot%2Finc%2Feventz%2Fset_bookmark_category.inc;h=26bb1ea9819615222696b54180a707abfe43aad2;hb=d068d94b5e62de2f80164fd8062adce6e0ad93ae;hp=159a0859ff08f528f8ffcf522fa24618d524c0b3;hpb=51ff32267c4949bad6a8dddc502cbc01ed56edc8;p=mirrors%2FKyberia-bloodline.git diff --git a/wwwroot/inc/eventz/set_bookmark_category.inc b/wwwroot/inc/eventz/set_bookmark_category.inc index 159a085..26bb1ea 100644 --- a/wwwroot/inc/eventz/set_bookmark_category.inc +++ b/wwwroot/inc/eventz/set_bookmark_category.inc @@ -4,7 +4,12 @@ function set_bookmark_category() { global $node,$db,$error; $bookmarks=$_POST['bookmarks_chosen']; - $category_id=$_POST['bookmark_category_id']; + + if (isset($_POST['bookmark_category_id']) && + is_numeric($_POST['bookmark_category_id'])) { + $category_id=$_POST['bookmark_category_id']; + } + $new_parent=nodes::getNodeById($category_id,$_SESSION['user_id']); $new_parent_permissions=permissions::checkPermissions($new_parent); @@ -20,6 +25,11 @@ function set_bookmark_category() { foreach ($bookmarks as $chosen_id) { unset($chosen); + if (!is_numeric($chosen_id)) + { + $error=$error_messages['What a strange number..']; + return false; + } $db->query("start transaction");