Update posts.php

pataisyta kodo vieta 274 eilutė core/tools/posts.php Signed-off-by: Darius Jakaitis <105962203+flusity@users.noreply.github.com>
flusity · Oct 24, 2023 · 6943991 · 6943991
1 parent 81252bc
commit 6943991
Showing 1 changed file with 8 additions and 4 deletions.
diff --git a/core/tools/posts.php b/core/tools/posts.php
@@ -272,13 +272,17 @@ function loadPostAddForm(postMenuId) {
 </script>
 <?php
 if (isset($_GET['edit_post_id'])) {
-    $edit_post_id = $_GET['edit_post_id'];
-    echo "<script>loadPostEditForm($edit_post_id);</script>";
+    $edit_post_id = filter_input(INPUT_GET, 'edit_post_id', FILTER_SANITIZE_NUMBER_INT);
+    $safe_edit_post_id = htmlspecialchars($edit_post_id, ENT_QUOTES, 'UTF-8');
+    echo "<script>loadPostEditForm($safe_edit_post_id);</script>";
 }
+
 if (isset($_GET['menu_id'])) {
-    $menu_id = $_GET['menu_id'];
-    echo "<script>loadPostAddForm($menu_id);</script>";
+    $menu_id = filter_input(INPUT_GET, 'menu_id', FILTER_SANITIZE_NUMBER_INT);
+    $safe_menu_id = htmlspecialchars($menu_id, ENT_QUOTES, 'UTF-8');
+    echo "<script>loadPostAddForm($safe_menu_id);</script>";
 }
+
 ?>
 <script src="js/admin-post-edit.js"></script>