L-electron-Rare/moodle
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

rss MDLSITE-1007 fixed a potential security problem with blog rss feeds

Browse Source
This commit is contained in:
Andrew Davis
2010-10-04 08:12:28 +00:00
parent b146d98455
commit 5ce534eb7c
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
blog/rsslib.php
+3 -3
View File
@@ -114,12 +114,12 @@ function blog_rss_get_feed($context, $args) {
return null;
}
$type = $args[3];
$id = (int) $args[4]; // could be groupid / courseid / userid depending on $type
$type = clean_param($args[3], PARAM_ALPHA);
$id = clean_param($args[4], PARAM_INT); // could be groupid / courseid / userid depending on $type
$tagid=0;
if ($args[5] != 'rss.xml') {
$tagid = (int) $args[5];
$tagid = clean_param($args[5], PARAM_INT);
} else {
$tagid = 0;
}