Changeset 12990 for trunk/xmlrpc/BxDolXMLRPCImages.php

Timestamp:

10/20/09 19:42:05 (3 years ago)

Author:

Alexander Trofimov

Message:

Ticket #1340

File:

• trunk/xmlrpc/BxDolXMLRPCImages.php (modified) (5 diffs)

trunk/xmlrpc/BxDolXMLRPCImages.php

@@ -23 +23 @@
             return new xmlrpcresp(new xmlrpcval(array('error' => new xmlrpcval(1,"int")), "struct"));
 
-        if (BxDolService::call('photos', 'remove_object', array($iImageId)))
+        if (BxDolService::call('photos', 'remove_object', array((int)$iImageId)))
             return new xmlrpcval ("ok");
         return new xmlrpcval ("fail");
@@ -33 +33 @@
             return new xmlrpcresp(new xmlrpcval(array('error' => new xmlrpcval(1,"int")), "struct"));
 
-        if (BxDolService::call('avatar', 'make_avatar_from_shared_photo_auto', array($iImageId)))
+        if (BxDolService::call('avatar', 'make_avatar_from_shared_photo_auto', array((int)$iImageId)))
             return new xmlrpcval ("ok");
         return new xmlrpcval ("fail");
@@ -67 +67 @@
         if (!$f)
             return new xmlrpcval ("fail fopen");
-        if (!fwrite ($f, $binImageData, $iDataLength))
+        if (!fwrite ($f, $binImageData, (int)$iDataLength))
         {
             fclose($f);
@@ -85 +85 @@
 
         $aFileInfo = array();
-        $aFileInfo['medTitle'] = htmlspecialchars_adv($sTitle);
-        $aFileInfo['medDesc'] = process_db_input(htmlspecialchars_adv($sDesc));
-        $aFileInfo['medTags'] = process_db_input(htmlspecialchars_adv($sTags));
+        $aFileInfo['medTitle'] = process_db_input($sTitle, BX_TAGS_STRIP, BX_SLASHES_NO_ACTION);
+        $aFileInfo['medDesc'] = process_db_input($sDesc, BX_TAGS_VALIDATE, BX_SLASHES_NO_ACTION);
+        $aFileInfo['medTags'] = process_db_input($sTags, BX_TAGS_STRIP, BX_SLASHES_NO_ACTION);
         $aFileInfo['Categories'] = array ();
         $aFileInfo['album'] = is_array($mixedAlbum) && count($mixedAlbum) ? $mixedAlbum : array($mixedAlbum); 
+        foreach ($aFileInfo['album'] as $k => $v)
+            $aFileInfo['album'][$k] = process_db_input($v, BX_TAGS_STRIP, BX_SLASHES_NO_ACTION);
         
         $isUpdateThumb = (int)db_value("SELECT `Avatar` FROM `Profiles` WHERE `ID` = '$iId' LIMIT 1") ? false : true;
@@ -106 +108 @@
             return new xmlrpcresp(new xmlrpcval(array('error' => new xmlrpcval(1,"int")), "struct"));
 
-        return BxDolXMLRPCMedia::_getFilesInAlbum ('photos', $iIdProfile, $iAlbumId);
+        return BxDolXMLRPCMedia::_getFilesInAlbum ('photos', $iIdProfile, (int)$iAlbumId);
     }