[Phpgroupware-cvs] forum/inc/class.boforum.inc.php, 1.1.2.7.2.2

[nomail]

Update of /forum/inc
Modified Files:
        Branch: Version-0_9_16-branch
          class.boforum.inc.php

date: 2004/10/20 15:34:39;  author: skwashd;  state: Exp;  lines: +17 -12

Log Message:
some fixed
=====================================================================
Index: forum/inc/class.boforum.inc.php
diff -u forum/inc/class.boforum.inc.php:1.1.2.7.2.1 
forum/inc/class.boforum.inc.php:1.1.2.7.2.2
--- forum/inc/class.boforum.inc.php:1.1.2.7.2.1 Fri Oct 10 00:22:36 2003
+++ forum/inc/class.boforum.inc.php     Wed Oct 20 15:34:39 2004
@@ -45,20 +45,25 @@
                                $this->use_session = True;
                        }
 
-                       $var = Array(
-                               'view',
-                               'location',
-                               'cat_id',
-                               'forum_id'
+                       $input_vars = Array(
+                               'view'          => 'string',
+                               'location'      => 'string',
+                               'cat_id'        => 'int',
+                               'forum_id'      => 'int'
                        );
 
-                       for($i=0;$i<count($var);$i++)
+                       foreach($input_vars as $vname => $vtype)
                        {
-                               $var_str = $var[$i];
-//                             $this->$var_str = 
(@isset($_GET[$var_str])?intval($_GET[$var_str]):$this->$var_str);
-//                             $this->$var_str = 
(@isset($_POST[$var_str])?intval($_POST[$var_str]):$this->$var_str);
-                               $this->$var_str = 
(@isset($_GET[$var_str])?$_GET[$var_str]:$this->$var_str);
-                               $this->$var_str = 
(@isset($_POST[$var_str])?$_POST[$var_str]:$this->$var_str);
+                               if($vtype == 'string')
+                               {
+                                       $this->$vname = 
addslashes(@isset($_GET[$vname]) ? $_GET[$vname] : '');
+                                       $this->$vname = 
addslashes(@isset($_POST[$vname]) ? $_POST[$vname] : $this->$vname);
+                               }
+                               elseif($vtype == 'int')
+                               {
+                                       $this->$vname = 
intval(@isset($_GET[$vname]) ? $_GET[$vname] : '');
+                                       $this->$vname = 
intval(@isset($_POST[$vname]) ? $_POST[$vname] : $this->$vname);
+                               }
                        }
                        if(address@hidden($this->view))
                        {