Skip to content

Commit 90d4c44

Browse files
committed
Ensure provided period is a valid integer and a known value
- if provided period is not an integer or a known value, we raise an exception
1 parent 2349d14 commit 90d4c44

File tree

1 file changed

+9
-0
lines changed

1 file changed

+9
-0
lines changed

Diff for: client-report.php

+9
Original file line numberDiff line numberDiff line change
@@ -64,6 +64,15 @@
6464

6565
$period = CHttpRequest::get_Value('period');
6666

67+
// Check if period is an integer and listed in known periods
68+
if(!array_key_exists( $period, $periods_list)) {
69+
throw new Exception('Critical: provided value for (period) is unknown or not valid');
70+
}
71+
72+
if(!filter_var($period, FILTER_VALIDATE_INT)) {
73+
throw new Exception('Critical: provided value for (period) is unknown or not valid');
74+
}
75+
6776
$view->assign( 'no_report_options', 'false');
6877

6978
// Client informations

0 commit comments

Comments
 (0)