Changeset 12990 for trunk/xmlrpc/BxDolXMLRPCUtil.php

Timestamp:

10/20/09 19:42:05 (3 years ago)

Author:

Alexander Trofimov

Message:

Ticket #1340

File:

• trunk/xmlrpc/BxDolXMLRPCUtil.php (modified) (5 diffs)

trunk/xmlrpc/BxDolXMLRPCUtil.php

@@ -83 +83 @@
     {
         $sType = $sType == 'thumb' ? 'medium' : 'small';
-        return $GLOBALS['oFunctions']->getMemberAvatar ($iId, $sType);
+        return $GLOBALS['oFunctions']->getMemberAvatar ((int)$iId, $sType);
     }
 
@@ -89 +89 @@
     {
         $aRet = array ();
-        $aSexSql = getProfileInfo($iId); //db_arr( $sSexSql );
+        $aSexSql = getProfileInfo((int)$iId); 
         $aRet['title'] = new xmlrpcval($aSexSql['Headline']);
-        $aRet['thumb'] = new xmlrpcval(BxDolXMLRPCUtil::getThumbLink($iId));//$sFileName);
+        $aRet['thumb'] = new xmlrpcval(BxDolXMLRPCUtil::getThumbLink($iId));
         $aRet['sex'] = new xmlrpcval($aSexSql['Sex']);
         $aRet['age'] = new xmlrpcval(age($aSexSql['DateOfBirth']));
@@ -142 +142 @@
     function getIdByNickname ($sUser)
     {
+        $sUser = process_db_input($sUser, BX_TAGS_NO_ACTION, BX_SLASHES_NO_ACTION);
         return (int)db_value("SELECT `ID` FROM `Profiles` WHERE `NickName` = '$sUser' LIMIT 1");
     }
@@ -148 +149 @@
     {
         //sleep(1);
-        $iId = BxDolXMLRPCUtil::getIdByNickname ($sUser);
+        $iId = (int)BxDolXMLRPCUtil::getIdByNickname ($sUser);
         $_COOKIE["memberID" ] = $iId;
-        $_COOKIE["memberPassword"] = $sPwd;
+        $_COOKIE["memberPassword"] = process_db_input($sPwd, BX_TAGS_NO_ACTION, BX_SLASHES_NO_ACTION);
         return ($GLOBALS['logged']['member'] = member_auth(0, false)) ? $iId : 0;
     }
@@ -156 +157 @@
     function setLanguage ($sLang)
     {
-        if ('English' == $sLang)
+        if ('English' == $sLang || !preg_match('/[a-zA-Z]+/', $sLang))
             $sLang = 'en';
         $_GET['lang'] = $sLang;