diff options
Diffstat (limited to 'classes/rpc.php')
-rwxr-xr-x | classes/rpc.php | 96 |
1 files changed, 48 insertions, 48 deletions
diff --git a/classes/rpc.php b/classes/rpc.php index cc036736f..cb71412ae 100755 --- a/classes/rpc.php +++ b/classes/rpc.php @@ -8,14 +8,14 @@ class RPC extends Handler_Protected { } function setprofile() { - $_SESSION["profile"] = $_REQUEST["id"]; + $_SESSION["profile"] = clean($_REQUEST["id"]); // default value if (!$_SESSION["profile"]) $_SESSION["profile"] = null; } function remprofiles() { - $ids = explode(",", trim($_REQUEST["ids"])); + $ids = explode(",", trim(clean($_REQUEST["ids"]))); foreach ($ids as $id) { if ($_SESSION["profile"] != $id) { @@ -28,7 +28,7 @@ class RPC extends Handler_Protected { // Silent function addprofile() { - $title = trim($_REQUEST["title"]); + $title = trim(clean($_REQUEST["title"])); if ($title) { $this->pdo->beginTransaction(); @@ -62,8 +62,8 @@ class RPC extends Handler_Protected { } function saveprofile() { - $id = $_REQUEST["id"]; - $title = trim($_REQUEST["value"]); + $id = clean($_REQUEST["id"]); + $title = trim(clean($_REQUEST["value"])); if ($id == 0) { print __("Default profile"); @@ -82,7 +82,7 @@ class RPC extends Handler_Protected { // Silent function remarchive() { - $ids = explode(",", $_REQUEST["ids"]); + $ids = explode(",", clean($_REQUEST["ids"])); $sth = $this->pdo->prepare("DELETE FROM ttrss_archived_feeds WHERE (SELECT COUNT(*) FROM ttrss_user_entries @@ -95,10 +95,10 @@ class RPC extends Handler_Protected { } function addfeed() { - $feed = $_REQUEST['feed']; - $cat = $_REQUEST['cat']; - $login = $_REQUEST['login']; - $pass = trim($_REQUEST['pass']); + $feed = clean($_REQUEST['feed']); + $cat = clean($_REQUEST['cat']); + $login = clean($_REQUEST['login']); + $pass = trim(clean($_REQUEST['pass'])); $rc = Feeds::subscribe_to_feed($feed, $cat, $login, $pass); @@ -106,7 +106,7 @@ class RPC extends Handler_Protected { } function togglepref() { - $key = $_REQUEST["key"]; + $key = clean($_REQUEST["key"]); set_pref($key, !get_pref($key)); $value = get_pref($key); @@ -115,8 +115,8 @@ class RPC extends Handler_Protected { function setpref() { // set_pref escapes input, so no need to double escape it here - $key = $_REQUEST['key']; - $value = str_replace("\n", "<br/>", $_REQUEST['value']); + $key = clean($_REQUEST['key']); + $value = nl2br($_REQUEST['value']); set_pref($key, $value, false, $key != 'USER_STYLESHEET'); @@ -124,8 +124,8 @@ class RPC extends Handler_Protected { } function mark() { - $mark = $_REQUEST["mark"]; - $id = $_REQUEST["id"]; + $mark = clean($_REQUEST["mark"]); + $id = clean($_REQUEST["id"]); $sth = $this->pdo->prepare("UPDATE ttrss_user_entries SET marked = ?, last_marked = NOW() @@ -137,7 +137,7 @@ class RPC extends Handler_Protected { } function delete() { - $ids = explode(",", $_REQUEST["ids"]); + $ids = explode(",", clean($_REQUEST["ids"])); $ids_qmarks = arr_qmarks($ids); $sth = $this->pdo->prepare("DELETE FROM ttrss_user_entries @@ -150,7 +150,7 @@ class RPC extends Handler_Protected { } function unarchive() { - $ids = explode(",", $_REQUEST["ids"]); + $ids = explode(",", clean($_REQUEST["ids"])); foreach ($ids as $id) { $this->pdo->beginTransaction(); @@ -203,7 +203,7 @@ class RPC extends Handler_Protected { } function archive() { - $ids = explode(",", $_REQUEST["ids"]); + $ids = explode(",", clean($_REQUEST["ids"])); foreach ($ids as $id) { $this->archive_article($id, $_SESSION["uid"]); @@ -257,8 +257,8 @@ class RPC extends Handler_Protected { } function publ() { - $pub = $_REQUEST["pub"]; - $id = $_REQUEST["id"]; + $pub = clean($_REQUEST["pub"]); + $id = clean($_REQUEST["id"]); $sth = $this->pdo->prepare("UPDATE ttrss_user_entries SET published = ?, last_published = NOW() @@ -270,7 +270,7 @@ class RPC extends Handler_Protected { } function getAllCounters() { - $last_article_id = (int) $_REQUEST["last_article_id"]; + $last_article_id = (int) clean($_REQUEST["last_article_id"]); $reply = array(); @@ -287,8 +287,8 @@ class RPC extends Handler_Protected { /* GET["cmode"] = 0 - mark as read, 1 - as unread, 2 - toggle */ function catchupSelected() { - $ids = explode(",", $_REQUEST["ids"]); - $cmode = sprintf("%d", $_REQUEST["cmode"]); + $ids = explode(",", clean($_REQUEST["ids"])); + $cmode = sprintf("%d", clean($_REQUEST["cmode"])); Article::catchupArticlesById($ids, $cmode); @@ -296,8 +296,8 @@ class RPC extends Handler_Protected { } function markSelected() { - $ids = explode(",", $_REQUEST["ids"]); - $cmode = (int)$_REQUEST["cmode"]; + $ids = explode(",", clean($_REQUEST["ids"])); + $cmode = (int)clean($_REQUEST["cmode"]); $this->markArticlesById($ids, $cmode); @@ -305,8 +305,8 @@ class RPC extends Handler_Protected { } function publishSelected() { - $ids = explode(",", $_REQUEST["ids"]); - $cmode = (int)$_REQUEST["cmode"]; + $ids = explode(",", clean($_REQUEST["ids"])); + $cmode = (int)clean($_REQUEST["cmode"]); $this->publishArticlesById($ids, $cmode); @@ -314,10 +314,10 @@ class RPC extends Handler_Protected { } function sanityCheck() { - $_SESSION["hasAudio"] = $_REQUEST["hasAudio"] === "true"; - $_SESSION["hasSandbox"] = $_REQUEST["hasSandbox"] === "true"; - $_SESSION["hasMp3"] = $_REQUEST["hasMp3"] === "true"; - $_SESSION["clientTzOffset"] = $_REQUEST["clientTzOffset"]; + $_SESSION["hasAudio"] = clean($_REQUEST["hasAudio"]) === "true"; + $_SESSION["hasSandbox"] = clean($_REQUEST["hasSandbox"]) === "true"; + $_SESSION["hasMp3"] = clean($_REQUEST["hasMp3"]) === "true"; + $_SESSION["clientTzOffset"] = clean($_REQUEST["clientTzOffset"]); $reply = array(); @@ -332,7 +332,7 @@ class RPC extends Handler_Protected { } function completeLabels() { - $search = $_REQUEST["search"]; + $search = clean($_REQUEST["search"]); $sth = $this->pdo->prepare("SELECT DISTINCT caption FROM ttrss_labels2 @@ -351,9 +351,9 @@ class RPC extends Handler_Protected { function updateFeedBrowser() { if (defined('_DISABLE_FEED_BROWSER') && _DISABLE_FEED_BROWSER) return; - $search = $_REQUEST["search"]; - $limit = $_REQUEST["limit"]; - $mode = (int) $_REQUEST["mode"]; + $search = clean($_REQUEST["search"]); + $limit = clean($_REQUEST["limit"]); + $mode = (int) clean($_REQUEST["mode"]); require_once "feedbrowser.php"; @@ -365,8 +365,8 @@ class RPC extends Handler_Protected { // Silent function massSubscribe() { - $payload = json_decode($_REQUEST["payload"], false); - $mode = $_REQUEST["mode"]; + $payload = json_decode(clean($_REQUEST["payload"]), false); + $mode = clean($_REQUEST["mode"]); if (!$payload || !is_array($payload)) return; @@ -417,11 +417,11 @@ class RPC extends Handler_Protected { } function catchupFeed() { - $feed_id = $_REQUEST['feed_id']; - $is_cat = $_REQUEST['is_cat'] == "true"; - $mode = $_REQUEST['mode']; - $search_query = $_REQUEST['search_query']; - $search_lang = $_REQUEST['search_lang']; + $feed_id = clean($_REQUEST['feed_id']); + $is_cat = clean($_REQUEST['is_cat']) == "true"; + $mode = clean($_REQUEST['mode']); + $search_query = clean($_REQUEST['search_query']); + $search_lang = clean($_REQUEST['search_lang']); Feeds::catchup_feed($feed_id, $is_cat, false, $mode, [$search_query, $search_lang]); @@ -429,7 +429,7 @@ class RPC extends Handler_Protected { } function setpanelmode() { - $wide = (int) $_REQUEST["wide"]; + $wide = (int) clean($_REQUEST["wide"]); setcookie("ttrss_widescreen", $wide, time() + COOKIE_LIFETIME_LONG); @@ -566,7 +566,7 @@ class RPC extends Handler_Protected { } function getlinktitlebyid() { - $id = $_REQUEST['id']; + $id = clean($_REQUEST['id']); $sth = $this->pdo->prepare("SELECT link, title FROM ttrss_entries, ttrss_user_entries WHERE ref_id = ? AND ref_id = id AND owner_uid = ?"); @@ -583,10 +583,10 @@ class RPC extends Handler_Protected { } function log() { - $msg = $_REQUEST['msg']; - $file = basename($_REQUEST['file']); - $line = (int) $_REQUEST['line']; - $context = $_REQUEST['context']; + $msg = clean($_REQUEST['msg']); + $file = basename(clean($_REQUEST['file'])); + $line = (int) clean($_REQUEST['line']); + $context = clean($_REQUEST['context']); if ($msg) { Logger::get()->log_error(E_USER_WARNING, |