Changeset 3022:4e016e87d540 for inc/load_plugin_file.php

Timestamp:

06/28/15 11:02:35 (10 years ago)

Author:

Nicolas <nikrou77@…>

Branch:

default

Message:

filter $_GETv? for load_plugin

File:

• inc/load_plugin_file.php (modified) (1 diff)

inc/load_plugin_file.php

@@ -48 +48 @@
 
 // $_GET['v'] : version in url to bypass cache in case of dotclear upgrade or in dev mode
-// Only $_GET['pf'] and $_GET['v'] are allowed in URL
-if (count($_GET) > 2)
+// but don't care of value
+if (isset($_GET['v']))
+{
+    unset($_GET['v']);
+}
+
+// Only $_GET['pf'] is allowed in URL
+if (count($_GET) > 1)
 {
     header('Content-Type: text/plain');