Skip to content

Commit 4d2ce08

Browse files
authored
Update report.php (OpenMage#1588)
This should improve OpenMage#1581 If checks that parameter $_GET['id'] is passed (it's then casted to int by processor.php) but ONLY if the report.php script is called directly. This first part of the check is necessary because report.php is included in Mage::printException()
1 parent 308ad52 commit 4d2ce08

File tree

1 file changed

+2
-0
lines changed

1 file changed

+2
-0
lines changed

errors/report.php

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -24,6 +24,8 @@
2424
* @license http://opensource.org/licenses/osl-3.0.php Open Software License (OSL 3.0)
2525
*/
2626

27+
if ($_SERVER['SCRIPT_FILENAME'] == __FILE__ && (!isset($_GET['id']) || strlen($_GET['id']) == 0)) die("Missing parameter: id");
28+
2729
require_once 'processor.php';
2830

2931
$processor = new Error_Processor();

0 commit comments

Comments
 (0)