Fix magic_quotes_gpc related bug. Reported by Alex Baturin.
authorGuillaume (ioguix) de Rorthais <ioguix@free.fr>
Sat, 15 May 2010 15:36:03 +0000 (17:36 +0200)
committerGuillaume (ioguix) de Rorthais <ioguix@free.fr>
Sat, 15 May 2010 15:48:10 +0000 (17:48 +0200)
This parameter is not settable from script + it affects parse_str that brakes redirect.php

libraries/lib.inc.php
redirect.php

index 06b0d9f5b107e34dac9c03e5d4675d7dee9b1345..17521214c72e76537ca514e91395193bf33f719b 100644 (file)
@@ -69,7 +69,6 @@
        $misc->setForm();
 
        // Enforce PHP environment
-       ini_set('magic_quotes_gpc', 0);
        ini_set('magic_quotes_runtime', 0);
        ini_set('magic_quotes_sybase', 0);
        ini_set('arg_separator.output', '&amp;');
index f199681a4fdfbec5f0eb6478dbd7f115c3819d5c..704859643d081926dc7759dc8e11f07684deeae7 100644 (file)
                parse_str(value(url($url['url'], $url['urlvars']), $_REQUEST), $vars);
                array_shift($vars);
 
+               /* parse_str function is affected by magic_quotes_gpc */
+               if (ini_get('magic_quotes_gpc')) {
+                       $misc->stripVar($vars);
+               }
+
                $_REQUEST = array_merge($_REQUEST, $vars);
                $_GET = array_merge($_GET, $vars);
        }