Update of /cvsroot/mantisbt/mantisbt
In directory sc8-pr-cvs16.sourceforge.net:/tmp/cvs-serv9679
Modified Files:
billing_inc.php
Log Message:
0008202: Potential Cross-Site Scripting Flaws
Index: billing_inc.php
===================================================================
RCS file: /cvsroot/mantisbt/mantisbt/billing_inc.php,v
retrieving revision 1.12
retrieving revision 1.13
diff -u -d -r1.12 -r1.13
--- billing_inc.php 11 Jul 2007 21:13:24 -0000 1.12
+++ billing_inc.php 26 Jul 2007 21:59:43 -0000 1.13
@@ -51,9 +51,9 @@
$t_bugnote_stats_from_def_m = $t_bugnote_stats_from_def_ar[1];
$t_bugnote_stats_from_def_y = $t_bugnote_stats_from_def_ar[2];
- $t_bugnote_stats_from_d = gpc_get_string('start_day', $t_bugnote_stats_from_def_d);
- $t_bugnote_stats_from_m = gpc_get_string('start_month', $t_bugnote_stats_from_def_m);
- $t_bugnote_stats_from_y = gpc_get_string('start_year', $t_bugnote_stats_from_def_y);
+ $t_bugnote_stats_from_d = gpc_get_int('start_day', $t_bugnote_stats_from_def_d);
+ $t_bugnote_stats_from_m = gpc_get_int('start_month', $t_bugnote_stats_from_def_m);
+ $t_bugnote_stats_from_y = gpc_get_int('start_year', $t_bugnote_stats_from_def_y);
$t_bugnote_stats_to_def = $t_today;
$t_bugnote_stats_to_def_ar = explode ( ":", $t_bugnote_stats_to_def );
@@ -61,12 +61,12 @@
$t_bugnote_stats_to_def_m = $t_bugnote_stats_to_def_ar[1];
$t_bugnote_stats_to_def_y = $t_bugnote_stats_to_def_ar[2];
- $t_bugnote_stats_to_d = gpc_get_string('end_day', $t_bugnote_stats_to_def_d);
- $t_bugnote_stats_to_m = gpc_get_string('end_month', $t_bugnote_stats_to_def_m);
- $t_bugnote_stats_to_y = gpc_get_string('end_year', $t_bugnote_stats_to_def_y);
+ $t_bugnote_stats_to_d = gpc_get_int('end_day', $t_bugnote_stats_to_def_d);
+ $t_bugnote_stats_to_m = gpc_get_int('end_month', $t_bugnote_stats_to_def_m);
+ $t_bugnote_stats_to_y = gpc_get_int('end_year', $t_bugnote_stats_to_def_y);
$f_get_bugnote_stats_button = gpc_get_string('get_bugnote_stats_button', '');
- $f_bugnote_cost = gpc_get_string( 'bugnote_cost', '' );
+ $f_bugnote_cost = gpc_get_int( 'bugnote_cost', '' );
$f_project_id = helper_get_current_project();
if ( ON == config_get( 'time_tracking_with_billing' ) ) {
|
