issue60, input validation for calendar-matrix parameters
authorAndreas Unterkircher <unki@netshadow.at>
Thu, 26 Jul 2007 04:05:08 +0000 (04:05 +0000)
committerAndreas Unterkircher <unki@netshadow.at>
Thu, 26 Jul 2007 04:05:08 +0000 (04:05 +0000)
git-svn-id: file:///var/lib/svn/phpfspot/trunk@254 fa6a889d-dae6-447d-9e79-4ba9a3039384

rpc.php

diff --git a/rpc.php b/rpc.php
index b691bd8908abdaa287928a4018fa4ce889c9a4fa..8c72e0f01e1185fabd65a0405eba7eb8f62e30d5 100644 (file)
--- a/rpc.php
+++ b/rpc.php
@@ -107,7 +107,10 @@ class PHPFSPOT_RPC {
             break;
 
          case 'get_calendar_matrix':
-            $fspot->get_calendar_matrix($_GET['year'], $_GET['month'], $_GET['day']);
+            if(is_numeric($_GET['year']) && is_numeric($_GET['month']) &&
+               is_numeric($_GET['day'])) {
+               $fspot->get_calendar_matrix($_GET['year'], $_GET['month'], $_GET['day']);
+            }
             break;
 
          case 'what_to_do':