dinislage/PrestaShop
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[-] CORE : Fix bug #PSCFI-7168 cast and truncate POST values for statistics.php controller

Browse Source
This commit is contained in:
gRoussac committed 2013-05-16 18:30:58 +02:00
1 parent 0765dde5c0
commit 2bfad8017e
1 file changed
+10 -10
Download Patch File Download Diff File Expand all files Collapse all files
controllers/front/StatisticsController.php
+10 -10
View File
@@ -54,17 +54,17 @@ class StatisticsControllerCore extends FrontController
if (sha1($id_guest._COOKIE_KEY_) != $this->param_token) if (sha1($id_guest._COOKIE_KEY_) != $this->param_token)
die; die;
$guest = new Guest($id_guest); $guest = new Guest((int)substr($_POST['id_guest'],0,10));
$guest->javascript = true; $guest->javascript = true;
$guest->screen_resolution_x = (int)Tools::getValue('screen_resolution_x'); $guest->screen_resolution_x = (int)substr($_POST['screen_resolution_x'],0,5);
$guest->screen_resolution_y = (int)Tools::getValue('screen_resolution_y'); $guest->screen_resolution_y = (int)substr($_POST['screen_resolution_y'],0,5);
$guest->screen_color = (int)Tools::getValue('screen_color'); $guest->screen_color = (int)substr($_POST['screen_color'],0,3);
$guest->sun_java = (int)Tools::getValue('sun_java'); $guest->sun_java = (int)substr($_POST['sun_java'],0,1);
$guest->adobe_flash = (int)Tools::getValue('adobe_flash'); $guest->adobe_flash = (int)substr($_POST['adobe_flash'],0,1);
$guest->adobe_director = (int)Tools::getValue('adobe_director'); $guest->adobe_director = (int)substr($_POST['adobe_director'],0,1);
$guest->apple_quicktime = (int)Tools::getValue('apple_quicktime'); $guest->apple_quicktime = (int)substr($_POST['apple_quicktime'],0,1);
$guest->real_player = (int)Tools::getValue('real_player'); $guest->real_player = (int)substr($_POST['real_player'],0,1);
$guest->windows_media = (int)Tools::getValue('windows_media'); $guest->windows_media = (int)substr($_POST['windows_media'],0,1);
$guest->update(); $guest->update();
} }