Changes in [2741:014e6f1fedce:2742:8382f97c65e2]

Files:

• .hgtags (modified) (1 diff)
• CHANGELOG (modified) (1 diff)
• admin/search.php (modified) (2 diffs)
• admin/xmlrpc.php (modified) (1 diff)

.hgtags

@@ -20 +20 @@
 1f8978ee39fc70bf9a6c345cf3b550722b819173 2.6.2
 121f94747a10af7f58a88c00537eafc4e0d29685 2.6.3
+80d565483595acca5b1d9e149aa8a2a9fe5983a6 2.6.4

CHANGELOG

@@ +1 @@
+Dotclear 2.6.4 - 2014-08-18
+===========================================================
+* Security fix: Sanitize search request. Thanks to Takayuki Uchiyama
+* Security fix: Strenghened xmlrpc (see http://www.breaksec.com/?p=6362)
+
 Dotclear 2.6.3 - 2014-05-16
 ===========================================================

admin/search.php

@@ -29 +29 @@
 if ($q)
 {
+     $q = html::escapeHTML($q);
+
      $params = array();
 
@@ -94 +96 @@
 '<form action="'.$core->adminurl->get("admin.search").'" method="get">'.
 '<div class="fieldset"><h3>'.__('Search options').'</h3>'.
-'<p><label for="q">'.__('Query:').' </label>'.form::field('q',30,255,html::escapeHTML($q)).'</p>'.
+'<p><label for="q">'.__('Query:').' </label>'.form::field('q',30,255,$q).'</p>'.
 '<p><label for="qtype1" class="classic">'.form::radio(array('qtype','qtype1'),'p',$qtype == 'p').' '.__('Search in entries').'</label> '.
 '<label for="qtype2" class="classic">'.form::radio(array('qtype','qtype2'),'c',$qtype == 'c').' '.__('Search in comments').'</label></p>'.

admin/xmlrpc.php

@@ -27 +27 @@
 }
 
+# Avoid plugins warnings, set a default blog
+$core->setBlog($blog_id);
+
 # Loading plugins
 $core->plugins->loadModules(DC_PLUGINS_ROOT);