Check that the tag GET variable is a string. (#147)

This commit is contained in:
Hanno Böck 2022-12-30 21:43:22 +01:00 committed by GitHub
parent f15808ad26
commit 5f00e07491
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -66,7 +66,7 @@ class serendipity_event_freetag extends serendipity_event
'smarty' => '2.6.7',
'php' => '7.0'
));
$propbag->add('version', '3.70.5');
$propbag->add('version', '3.70.6');
$propbag->add('event_hooks', array(
'frontend_fetchentries' => true,
'frontend_fetchentry' => true,
@ -1170,7 +1170,7 @@ addLoadEvent(enableAutocomplete);
} else {
$showtag = serendipity_db_escape_string($this->tags['show']);
}
} else if (!empty($serendipity['GET']['tag'])) {
} else if (!empty($serendipity['GET']['tag']) && is_string($serendipity['GET']['tag'])) {
$showtag = serendipity_db_escape_string(urldecode($serendipity['GET']['tag']));
}