diff options
| author | Mike Macgirvin <mike@macgirvin.com> | 2010-07-13 02:00:53 -0700 |
|---|---|---|
| committer | Mike Macgirvin <mike@macgirvin.com> | 2010-07-13 02:00:53 -0700 |
| commit | c6267a2cd2e3a731f44df9288ced508ad90c4ca3 (patch) | |
| tree | 0558c6669ead159b855e9bd8e63bb24cc8da42f3 /mod | |
| parent | 7e16f8cdae597cc8329c3cc9ce769d512ba84085 (diff) | |
| download | volse-hubzilla-c6267a2cd2e3a731f44df9288ced508ad90c4ca3.tar.gz volse-hubzilla-c6267a2cd2e3a731f44df9288ced508ad90c4ca3.tar.bz2 volse-hubzilla-c6267a2cd2e3a731f44df9288ced508ad90c4ca3.zip | |
turn groups back into numbers
Diffstat (limited to 'mod')
| -rw-r--r-- | mod/item.php | 11 | ||||
| -rw-r--r-- | mod/profile.php | 6 |
2 files changed, 6 insertions, 11 deletions
diff --git a/mod/item.php b/mod/item.php index 672084fe8..ff3f41138 100644 --- a/mod/item.php +++ b/mod/item.php @@ -1,12 +1,7 @@ <?php -function sanitise_intacl(&$item) { - $item = '<' . intval(notags(trim($item))) . '>'; -} - - function sanitise_acl(&$item) { - $item = '<' . notags(trim($item)) . '>'; + $item = '<' . intval(notags(trim($item))) . '>'; } function item_post(&$a) { @@ -35,7 +30,7 @@ function item_post(&$a) { $str_contact_allow = ''; $contact_allow = $_POST['contact_allow']; if(is_array($contact_allow)) { - array_walk($contact_allow,'sanitise_intacl'); + array_walk($contact_allow,'sanitise_acl'); $str_contact_allow = implode('',$contact_allow); } @@ -49,7 +44,7 @@ function item_post(&$a) { $str_contact_deny = ''; $contact_deny = $_POST['contact_deny']; if(is_array($contact_deny)) { - array_walk($contact_deny,'sanitise_intacl'); + array_walk($contact_deny,'sanitise_acl'); $str_contact_deny = implode('',$contact_deny); } diff --git a/mod/profile.php b/mod/profile.php index 37bf04a0c..5a1ac0639 100644 --- a/mod/profile.php +++ b/mod/profile.php @@ -170,7 +170,7 @@ function profile_content(&$a) { $gs = '<<>>'; // should be impossible to match if(count($groups)) { foreach($groups as $g) - $gs .= '|<' . dbesc($g) . '>'; + $gs .= '|<' . intval($g) . '>'; } $sql_extra = sprintf( " AND ( `allow_cid` = '' OR `allow_cid` REGEXP '<%d>' ) @@ -180,8 +180,8 @@ function profile_content(&$a) { intval($_SESSION['visitor_id']), intval($_SESSION['visitor_id']), - $gs, - $gs + dbesc($gs), + dbesc($gs) ); } |