Changeset 13809 for trunk/modules/boonex/simple_messenger/classes/BxSimpleMessengerModule.php

Timestamp:

03/20/10 02:08:41 (2 years ago)

Author:

Alexander Ermashev

Message:

minor changes into simple messenger (remove all possible mysql injections)

File:

• trunk/modules/boonex/simple_messenger/classes/BxSimpleMessengerModule.php (modified) (11 diffs)

trunk/modules/boonex/simple_messenger/classes/BxSimpleMessengerModule.php

@@ -28 +28 @@
     require_once('BxSimpleMessengerPrivacy.php');
 
-    check_logged();
-
     /*
      * Simple messenger module by BoonEx
@@ -159 +157 @@
             $this -> sMemberMenuPosition = ( isset($_COOKIE['menu_position']) ) 
                 ? $_COOKIE['menu_position']
-                : getParam( 'ext_nav_menu_top_position' );
+                : getParam('ext_nav_menu_top_position');
 
             $this -> aSmiles = array(
@@ -282 +280 @@
 
                     $sMessage = ( isset($_POST['message']) ) 
-                        ? strip_tags( urldecode($_POST['message']) ) 
-                        : null;
+                        ? urldecode($_POST['message']) 
+                        : '';
 
                     if( $this -> oPrivacy -> check('contact', $iRecipientId, $this -> iLoggedMemberId) ) {
@@ -388 +386 @@
 
                     // defines all registered messages box and last message's id in it ;
-                    $sRegisteredBoxes = ( isset($_POST['registered_chat_boxes']) ) ? $_POST['registered_chat_boxes'] : null;
-
-                    if ( $sRegisteredBoxes ) {
-
-                        $aAllBoxes = explode(',', $sRegisteredBoxes);
+                    $sRegisteredBoxes = ( isset($_POST['registered_chat_boxes']) ) 
+                        ? $_POST['registered_chat_boxes'] 
+                        : '';
+
+                    $aAllBoxes = $sRegisteredBoxes ? explode(',', $sRegisteredBoxes) : '';
+
+                    if ( $aAllBoxes && is_array($aAllBoxes) ) {
                         $aRegBoxes = array();
 
@@ -423 +423 @@
                     $aNewSenders = $this -> _oDb -> getNewChatBoxes($this -> iLoggedMemberId, $aRegBoxes);
 
-                    if ( $aNewSenders ) {
+                    if ($aNewSenders) {
                         // procces new messages array ;
                         foreach( $aNewSenders as $iKey => $iSenderId)
                         {
+                            $iSenderId = (int) $iSenderId;
+
                             // get some sender's info;
                             $aSenderInfo = getProfileInfo($iSenderId);
@@ -448 +450 @@
                         foreach($aRegBoxes as $iSenderId => $aItems)
                         {
+                            $iSenderId = (int) $iSenderId;
+
                             $iLastMessagesId = 0;
                             $iCountMessages  = 0;
@@ -587 +591 @@
             global $oFunctions;
 
+            $iSender          = (int) $iSender;
+            
             $oModuleDb        = new BxDolModuleDb();
             $oUserStatus      = new BxDolUserStatusView();
@@ -717 +723 @@
             $iCountMessages = 0;
 
-            if ( $aMessages ) {
+            if ( $aMessages && is_array($aMessages) ) {
                 foreach( $aMessages as $iKey => $aItems )
                 {
+                    $iKey = (int) $iKey;
+
                     $iCountMessages++;
                     $iLastMessageId   = $aMessages[$iKey]['ID'];
@@ -733 +741 @@
                     );
 
-                    $sOutputMessages .=  $this -> _oTemplate -> parseHtmlByName( 'message.html', $aTemplateKeys );
+                    $sOutputMessages .=  $this -> _oTemplate 
+                            -> parseHtmlByName( 'message.html', $aTemplateKeys );
                 }
             }
@@ -844 +853 @@
             }
 
-            $sOutputCode = null;
+            $sOutputCode = '';
             if( $this -> isMessengerAlowed($iViewedMemberId) 
                 && $this -> isMessengerAlowed($this -> iLoggedMemberId) ) {
@@ -866 +875 @@
         function serviceGetMessengerCore()
         {
-            $sOutputCode = null;
+            $sOutputCode = '';
             if( $this -> isMessengerAlowed($this -> iLoggedMemberId, true) ) {
                 $sOutputCode = $this -> getSimpleMessengerCore();