Changeset 957 for trunk/Modules/News/NewsPage.php

Timestamp:

Sep 22, 2023, 11:55:38 PM (8 months ago)

Author:

chronos

Message:

• Added: Store request URL into Log table.
• Fixed: Some warnings for invalid inputs.

File:

• trunk/Modules/News/NewsPage.php (modified) (9 diffs)

trunk/Modules/News/NewsPage.php

@@ -24 +24 @@
     {
       $Category = $this->GetCategory();
-      if (array_key_exists('id', $_GET)) $Id = $_GET['id'] * 1;
+      if (array_key_exists('id', $_GET) and is_integer($_GET['id'])) $Id = $_GET['id'] * 1;
         else return $Output .= 'Položka nenalezena.';
       $DbResult = $this->Database->query('SELECT `News`.*, `User`.`Name` FROM `News` '.
@@ -67 +67 @@
     if ($User->CheckPermission('News', 'Insert', 'Group', $Category['Id']))
     {
-      $this->System->PageHeaders[] = array($this, 'GetPageHeader');
+      Core::Cast($this->System)->PageHeaders[] = array($this, 'GetPageHeader');
       $Output = '<strong>Vložení nové aktuality:</strong><br />';
       // TODO: Static reference to dynamic category item
@@ -170 +170 @@
         if ($Row['Intranet'] == 1) $IntranetChecked = ' checked="1"';
           else $IntranetChecked = 0;
-        $this->System->PageHeaders[] = array($this, 'GetPageHeader');
+          Core::Cast($this->System)->PageHeaders[] = array($this, 'GetPageHeader');
         $Output .= '<strong>Editace aktuality v kategorii '.$Category['Caption'].':</strong><br />';
         $Output .= '<form action="?action=update" method="post">'.
@@ -296 +296 @@
   {
     $Category = array('Id' => 1); // Default category
-    if (array_key_exists('category', $_GET)) $Category['Id'] = $_GET['category'] * 1;
-    if (array_key_exists('category', $_POST)) $Category['Id'] = $_POST['category'] * 1;
+    if (array_key_exists('category', $_GET) and is_integer($_GET['category'])) $Category['Id'] = $_GET['category'] * 1;
+    if (array_key_exists('category', $_POST) and is_integer($_POST['category'])) $Category['Id'] = $_POST['category'] * 1;
     //if (is_null($Category)) throw new Exception('Kategorie neurčena');
     else
@@ -311 +311 @@
   {
     $Output = '';
-    if (array_key_exists('action',$_GET)) $Action = $_GET['action'];
+    if (array_key_exists('action', $_GET)) $Action = $_GET['action'];
       else $Action = '';
     if ($Action == 'view') $Output .= $this->ShowView();
@@ -361 +361 @@
         if (substr($Index, 0, 8) == 'category') $Select .= '-'.substr($Index, 8);
       }
-      $Select = $this->System->Config['Web']['RootFolder'].'/aktuality/rss/?select='.substr($Select, 1);
+      $Select = Core::Cast($this->System)->Config['Web']['RootFolder'].'/aktuality/rss/?select='.substr($Select, 1);
       $Output = 'Výsledný RSS kanál: <a href="'.$Select.'">'.$Select.'</a>';
     } else
@@ -412 +412 @@
       foreach ($Parts as $Part)
       {
-        $Where .= 'OR (`Category`='.($Part * 1).')';
+        if (is_integer($Part)) $Where .= 'OR (`Category`='.($Part * 1).')';
       }
       $Where = substr($Where, 2);
@@ -474 +474 @@
       $Items[] = array(
         'Title' => $Categories[$Row['Category']].' - '.$Row['Title'],
-        'Link' => 'https://'.$this->System->Config['Web']['Host'].'/aktuality/?category='.$Row['Category'],
+        'Link' => 'https://'.Core::Cast($this->System)->Config['Web']['Host'].'/aktuality/?category='.$Row['Category'],
         'Description' => $Row['Content'].' ('.$Author.')'.$EnclosuresText,
         'Time' => $Row['UnixTime'],
@@ -481 +481 @@
 
     $RSS = new RSS();
-    $RSS->Title = $this->System->Config['Web']['Title'].' - Aktuality';
-    $RSS->Link = 'https://'.$this->System->Config['Web']['Host'].'/';
-    $RSS->Description = 'Aktuality '.$this->System->Config['Web']['Description'];
-    $RSS->WebmasterEmail = $this->System->Config['Web']['AdminEmail'];
+    $RSS->Title = Core::Cast($this->System)->Config['Web']['Title'].' - Aktuality';
+    $RSS->Link = 'https://'.Core::Cast($this->System)->Config['Web']['Host'].'/';
+    $RSS->Description = 'Aktuality '.Core::Cast($this->System)->Config['Web']['Description'];
+    $RSS->WebmasterEmail = Core::Cast($this->System)->Config['Web']['AdminEmail'];
     $RSS->Items = $Items;
     return $RSS->Generate();