LesLibres.org/Rss-Bridge
2
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

[core] leave $_REQUEST alone

Browse source 
Signed-off-by: Pierre Mazière <pierre.maziere@gmx.com>
This commit is contained in:
Pierre Mazière 2016-08-25 01:07:49 +02:00
parent 70a8b88b6f
commit 1bb94aecc6
1 changed files with 6 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
index.php
View file

@ -94,8 +94,6 @@ try{
$action=filter_input(INPUT_GET,'action'); $action=filter_input(INPUT_GET,'action');
$bridge=filter_input(INPUT_GET,'bridge'); $bridge=filter_input(INPUT_GET,'bridge');
if($action === 'display' && !empty($bridge)){ if($action === 'display' && !empty($bridge)){
unset($_REQUEST['action']);
unset($_REQUEST['bridge']);
// DEPRECATED: 'nameBridge' scheme is replaced by 'name' in bridge parameter values // DEPRECATED: 'nameBridge' scheme is replaced by 'name' in bridge parameter values
// this is to keep compatibility until futher complete removal // this is to keep compatibility until futher complete removal
if(($pos=strpos($bridge,'Bridge'))===(strlen($bridge)-strlen('Bridge'))){ if(($pos=strpos($bridge,'Bridge'))===(strlen($bridge)-strlen('Bridge'))){
@ -103,7 +101,6 @@ try{
} }
$format = filter_input(INPUT_GET,'format'); $format = filter_input(INPUT_GET,'format');
unset($_REQUEST['format']);
// DEPRECATED: 'nameFormat' scheme is replaced by 'name' in format parameter values // DEPRECATED: 'nameFormat' scheme is replaced by 'name' in format parameter values
// this is to keep compatibility until futher complete removal // this is to keep compatibility until futher complete removal
if(($pos=strpos($format,'Format'))===(strlen($format)-strlen('Format'))){ if(($pos=strpos($format,'Format'))===(strlen($format)-strlen('Format'))){
@ -130,7 +127,12 @@ try{
$bridge->useProxy=false; $bridge->useProxy=false;
} }
$bridge->loadMetadatas(); $bridge->loadMetadatas();
$bridge->setDatas($_REQUEST); $params=$_REQUEST;
unset($params['action']);
unset($params['bridge']);
unset($params['format']);
unset($params['_noproxy']);
$bridge->setDatas($params);
// Data transformation // Data transformation
try { try {
$format = Format::create($format); $format = Format::create($format);