Changeset 13809 for trunk/modules/boonex/simple_messenger/classes/BxSimpleMessengerDb.php

Timestamp:

03/20/10 02:08:41 (2 years ago)

Author:

Alexander Ermashev

Message:

minor changes into simple messenger (remove all possible mysql injections)

File:

• trunk/modules/boonex/simple_messenger/classes/BxSimpleMessengerDb.php (modified) (3 diffs)

trunk/modules/boonex/simple_messenger/classes/BxSimpleMessengerDb.php

@@ -53 +53 @@
             $iSenderId = (int) $iSenderId;
             $iRecipientId = (int) $iRecipientId;
-            $sMessage = $this -> escape( $sMessage );
+            $sMessage = process_db_input($sMessage, BX_TAGS_STRIP);
 
             $sQuery = 
@@ -373 +373 @@
         function getHistoryList(&$aCoreSettings, $iRecipient, $iSender, $iLastMessageId = 0, $iMessageLimit = 0)
         {
-            $iRecipient = (int) $iRecipient;
-            $iSender = (int) $iSender;
+            $iRecipient     = (int) $iRecipient;
+            $iSender        = (int) $iSender;
             $iLastMessageId = (int) $iLastMessageId;
-            $iMessageLimit = (int) $iMessageLimit;
+            $iMessageLimit  = (int) $iMessageLimit;
 
             // define the rows limit ;
@@ -433 +433 @@
         {
             $iRecipientId = (int) $iRecipientId;
-            if( !is_array($aRegBoxes) ) {
-                return;
-            }
 
             // define registered chat boxes;
-            $sFilter = null;
-            if ( $aRegBoxes ) {
+            $sFilter = '';
+            if ( $aRegBoxes && is_array($aRegBoxes) ) {
                 foreach( $aRegBoxes  as $iKey => $aItem )
                 {