Changeset 1129320

Timestamp:

04/07/2015 07:46:54 AM (11 years ago)

Author:

hdflvplayer

Message:

Commit to fix id validation from get method issue

Location:

contus-video-gallery

Files:

• tags/2.8/hdflvvideoshare.php (modified) (3 diffs)
• trunk/hdflvvideoshare.php (modified) (3 diffs)

contus-video-gallery/tags/2.8/hdflvvideoshare.php

@@ -337 +337 @@
 function videohitcount_function() {
         global $wpdb;
-        $vid      = $_GET['vid'];                        
+        $vid      = intval($_GET['vid']);                        
         $hitList  = $wpdb->get_row( 'SELECT * FROM ' . $wpdb->prefix . 'hdflvvideoshare WHERE vid="' . intval( $vid ) . '"' );
         $hitCount = $hitList->hitcount;          
@@ -353 +353 @@
 function ratecount_function() {
     global $wpdb;
-    $vid      = $_GET['vid'];   
-    $get_rate = $_GET['rate'];   
+    $vid      = intval($_GET['vid']);   
+    $get_rate = intval($_GET['rate']);   
     if ( ! empty( $get_rate ) ) {
 
@@ -378 +378 @@
 function google_adsense(){
     global $wpdb;
-    $vid = $_GET['vid'];    
+    $vid = intval($_GET['vid']);    
     $google_adsense_id =  $wpdb->get_var('SELECT google_adsense_value FROM '.$wpdb->prefix.'hdflvvideoshare WHERE vid ='.$vid);
     $query = $wpdb->get_var('SELECT googleadsense_details FROM '.$wpdb->prefix.'hdflvvideoshare_vgoogleadsense WHERE id='.$google_adsense_id);

contus-video-gallery/trunk/hdflvvideoshare.php

@@ -337 +337 @@
 function videohitcount_function() {
         global $wpdb;
-        $vid      = $_GET['vid'];                        
+        $vid      = intval($_GET['vid']);                        
         $hitList  = $wpdb->get_row( 'SELECT * FROM ' . $wpdb->prefix . 'hdflvvideoshare WHERE vid="' . intval( $vid ) . '"' );
         $hitCount = $hitList->hitcount;          
@@ -353 +353 @@
 function ratecount_function() {
     global $wpdb;
-    $vid      = $_GET['vid'];   
-    $get_rate = $_GET['rate'];   
+    $vid      = intval($_GET['vid']);   
+    $get_rate = intval($_GET['rate']);   
     if ( ! empty( $get_rate ) ) {
 
@@ -378 +378 @@
 function google_adsense(){
     global $wpdb;
-    $vid = $_GET['vid'];    
+    $vid = intval($_GET['vid']);    
     $google_adsense_id =  $wpdb->get_var('SELECT google_adsense_value FROM '.$wpdb->prefix.'hdflvvideoshare WHERE vid ='.$vid);
     $query = $wpdb->get_var('SELECT googleadsense_details FROM '.$wpdb->prefix.'hdflvvideoshare_vgoogleadsense WHERE id='.$google_adsense_id);