// Fix some XSS
git-svn-id: http://dev.prestashop.com/svn/v1/branches/1.5.x@11236 b9a71923-0436-4b27-9f14-aed3839534dd
This commit is contained in:
@@ -147,7 +147,7 @@ class AdminCategoriesControllerCore extends AdminController
|
||||
if (Tools::getValue('id_category') && !Tools::isSubmit('updatecategory'))
|
||||
{
|
||||
$this->toolbar_btn['edit'] = array(
|
||||
'href' => self::$currentIndex.'&update'.$this->table.'&id_category='.Tools::getValue('id_category').'&token='.$this->token,
|
||||
'href' => self::$currentIndex.'&update'.$this->table.'&id_category='.(int)Tools::getValue('id_category').'&token='.$this->token,
|
||||
'desc' => $this->l('Edit')
|
||||
);
|
||||
$back = Tools::safeOutput(Tools::getValue('back', ''));
|
||||
@@ -160,7 +160,7 @@ class AdminCategoriesControllerCore extends AdminController
|
||||
}
|
||||
if ($this->display == 'view')
|
||||
$this->toolbar_btn['new'] = array(
|
||||
'href' => self::$currentIndex.'&add'.$this->table.'&id_parent='.Tools::getValue('id_category').'&token='.$this->token,
|
||||
'href' => self::$currentIndex.'&add'.$this->table.'&id_parent='.(int)Tools::getValue('id_category').'&token='.$this->token,
|
||||
'desc' => $this->l('Add new')
|
||||
);
|
||||
parent::initToolbar();
|
||||
|
||||
Reference in New Issue
Block a user