issue #1075 check the url keys are expected

Piwigo · Sep 20, 2019 · 7e154ab · 7e154ab
1 parent dcaf31f
commit 7e154ab
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/admin/permalinks.php b/admin/permalinks.php
@@ -26,6 +26,12 @@ function parse_sort_variables(
     {
       $base_url .= $is_first ? '?' : '&amp;';
       $is_first = false;
+
+      if (!in_array($key, array('page', 'psf', 'dpsf', 'pwg_token')))
+      {
+        fatal_error('unexpected URL get key');
+      }
+
       $base_url .= urlencode($key).'='.urlencode($value);
     }
   }