Force pos to be integer to avoid XSS.

This commit is contained in:
Michal Čihař
2006-11-17 08:47:26 +00:00
parent 1042770109
commit 6c06cb72d2
24 changed files with 166 additions and 189 deletions

View File

@@ -142,10 +142,10 @@ if ($plugin_param == 'table') {
if (!$csv_finish) {
// Grab empty field
if ($ch == $csv_terminated) {
$values[] = '';
if ($i == $len - 1) {
break;
}
$values[] = '';
$i++;
$ch = $buffer[$i];
continue;
@@ -154,10 +154,10 @@ if ($plugin_param == 'table') {
// Grab one field
$fallbacki = $i;
if ($ch == $csv_enclosed) {
$need_end = TRUE;
if ($i == $len - 1) {
break;
}
$need_end = TRUE;
$i++;
$ch = $buffer[$i];
} else {