From: <var...@us...> - 2017-05-23 09:30:04
|
Revision: 10007 http://sourceforge.net/p/phpwiki/code/10007 Author: vargenau Date: 2017-05-23 09:30:02 +0000 (Tue, 23 May 2017) Log Message: ----------- Better check arguments for GoogleMaps plugin Modified Paths: -------------- trunk/lib/plugin/GoogleMaps.php trunk/pgsrc/ReleaseNotes Modified: trunk/lib/plugin/GoogleMaps.php =================================================================== --- trunk/lib/plugin/GoogleMaps.php 2017-05-21 14:33:38 UTC (rev 10006) +++ trunk/lib/plugin/GoogleMaps.php 2017-05-23 09:30:02 UTC (rev 10007) @@ -97,9 +97,15 @@ if ($Longitude === '') { return $this->error(sprintf(_("A required argument “%s” is missing."), 'Longitude')); } + if (!is_numeric($Longitude)) { + return $this->error(_('Longitude must be a number.')); + } if ($Latitude === '') { return $this->error(sprintf(_("A required argument “%s” is missing."), 'Latitude')); } + if (!is_numeric($Latitude)) { + return $this->error(_('Latitude must be a number.')); + } $maps = JavaScript('', array('src' => "http://maps.google.com/maps?file=api&v=1&key=" . GOOGLE_LICENSE_KEY)); $id = GenerateId("googlemap"); Modified: trunk/pgsrc/ReleaseNotes =================================================================== --- trunk/pgsrc/ReleaseNotes 2017-05-21 14:33:38 UTC (rev 10006) +++ trunk/pgsrc/ReleaseNotes 2017-05-23 09:30:02 UTC (rev 10007) @@ -1,4 +1,4 @@ -Date: Mon, 13 Mar 2017 15:59:30 +0000 +Date: Tue, 23 May 2017 11:26:59 +0000 Mime-Version: 1.0 (Produced by PhpWiki 1.6.0) Content-Type: application/x-phpwiki; pagename=ReleaseNotes; @@ -31,6 +31,7 @@ ** It was possible to rename a page to a name with illegal characters, like ~[~] ** Remove wrong calls to setTightness in ##lib/~InlineParser.php## (bug reported by Harold Hallikainen) ** Importing a ZIP from an old wiki in Latin 1 (ISO 8859-1) failed. Reported by Frank Michael. +** Better check arguments for ~GoogleMaps plugin * Plugins: ** ~UpLoad plugin: put date and author in history ** ~UpLoad plugin: don't inline images This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |