Welcome to mirror list, hosted at ThFree Co, Russian Federation.

github.com/phpmyadmin/phpmyadmin.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorMichal Čihař <michal@cihar.com>2016-01-19 13:23:15 +0300
committerMichal Čihař <michal@cihar.com>2016-01-19 13:23:36 +0300
commita6ae24741e01bdbd4e3b7165183b800646fc8d73 (patch)
tree43acdbead76da93141a746866b4228e5a96f6f3b /gis_data_editor.php
parent897a844581761619d43f4e759bfe5ef117d400e1 (diff)
Validate parameters before use
Signed-off-by: Michal Čihař <michal@cihar.com>
Diffstat (limited to 'gis_data_editor.php')
-rw-r--r--gis_data_editor.php7
1 files changed, 7 insertions, 0 deletions
diff --git a/gis_data_editor.php b/gis_data_editor.php
index ac876da4d9..be13aeeb0e 100644
--- a/gis_data_editor.php
+++ b/gis_data_editor.php
@@ -23,6 +23,10 @@ require_once 'libraries/common.inc.php';
require_once 'libraries/gis/GIS_Factory.class.php';
require_once 'libraries/gis/GIS_Visualization.class.php';
+if (! isset($_REQUEST['field'])) {
+ PMA_Util::checkParameters(array('field'));
+}
+
// Get data if any posted
$gis_data = array();
if (PMA_isValid($_REQUEST['gis_data'], 'array')) {
@@ -185,6 +189,9 @@ if ($geom_type == 'GEOMETRYCOLLECTION') {
}
for ($a = 0; $a < $geom_count; $a++) {
+ if (! isset($gis_data[$a])) {
+ continue;
+ }
if ($geom_type == 'GEOMETRYCOLLECTION') {
echo '<br/><br/>';