phpBB • Free and Open Source Forum Software

RSS Facebook Twitter

Bug tracker

This ticket has been moved to our new tracker. Open Ticket PHPBB3-7183 now.

Missing validation for image dimensions (fix completed in vcs)

As far I can see, there is no Integer Validation on Image Dimension Settings, such as Avatar Dimensions, Attachment Dimensions etc. in the ACP. It is possible to enter values of the type string. This may cause problems in later usage.

Since the corresponding variables are explicitly set to false, I'm not sure, if this is a bug or the intended behaviour.

For example: acp_board.php , Line 105.
Code: Select all
'avatar_min_height'        => false, 'avatar_min_width' => false, 'avatar_max_height' => false, 'avatar_max_width' => false,  

Comments / History

Edited ticket

Action performed by bantu (3.0 Release Manager) on Apr 7th 2008, 15:51

Assigned ticket to user "Kellanved"

Action performed by Kellanved (Former Team Member) on Apr 7th 2008, 16:01

Changed ticket status from "New" to "Fix in progress"

Action performed by Kellanved (Former Team Member) on Apr 7th 2008, 16:01

Linked ticket with changeset: r8493

Action performed by Kellanved (Former Team Member) on Apr 7th 2008, 16:04

Changed ticket status from "Fix in progress" to "Fix completed in SVN"

Action performed by Kellanved (Former Team Member) on Apr 7th 2008, 16:05

Ticket details

  • Ticket ID: 24895
  • Project: phpBB 3.0.x
  • Status: Fix completed in VCS
  • Severity: Uncategorised/normal
  • Component: ACP
  • Project version: 3.0.0
  • PHP version: Unknown
  • Database: Unknown
  • Assigned to: Kellanved
  • Reported by: bantu (Send PM)
  • Reporter's tickets: List all tickets
  • Reported on: Apr 7th 2008, 15:51

Related SVN changesets

Advertisements

 BlueHost.com • Web Hosting UK • HostMonster • Reseller Web Hosting UK • FastDomain Hosting • Advertise on phpBB.com