Login | Register For Free | Help
Search for: (Advanced)

Mailing List Archive: Wikipedia: Mediawiki-CVS

SVN: [34622] trunk/phase3/includes/SpecialUpload.php

 

 

Wikipedia mediawiki-cvs RSS feed   Index | Next | Previous | View Threaded


minuteelectron at svn

May 11, 2008, 10:31 AM

Post #1 of 1 (11 views)
Permalink
SVN: [34622] trunk/phase3/includes/SpecialUpload.php

Revision: 34622
Author: minuteelectron
Date: 2008-05-11 17:31:38 +0000 (Sun, 11 May 2008)

Log Message:
-----------
Avoid possible register_globals issue.

Modified Paths:
--------------
trunk/phase3/includes/SpecialUpload.php

Modified: trunk/phase3/includes/SpecialUpload.php
===================================================================
--- trunk/phase3/includes/SpecialUpload.php 2008-05-11 17:28:51 UTC (rev 34621)
+++ trunk/phase3/includes/SpecialUpload.php 2008-05-11 17:31:38 UTC (rev 34622)
@@ -900,6 +900,11 @@
$useAjaxDestCheck = $wgUseAjax && $wgAjaxUploadDestCheck;
$useAjaxLicensePreview = $wgUseAjax && $wgAjaxLicensePreview;

+ // Initilaize $extensionList here in case it is not set later on
+ // (which would cause a E_NOTICE) and it must not be set only if it
+ // isn't set to avoid a possible register_globals issue.
+ $extensionList = '';
+
$adc = wfBoolToStr( $useAjaxDestCheck );
$alp = wfBoolToStr( $useAjaxLicensePreview );
$autofill = wfBoolToStr( $this->mDesiredDestName == '' );
@@ -1059,10 +1064,6 @@

$encComment = htmlspecialchars( $this->mComment );

- if( !isset( $extensionsList ) ) {
- $extensionsList = '';
- }
-
$wgOut->addHTML(
Xml::openElement( 'form', array( 'method' => 'post', 'action' => $titleObj->getLocalURL(),
'enctype' => 'multipart/form-data', 'id' => 'mw-upload-form' ) ) .



_______________________________________________
MediaWiki-CVS mailing list
MediaWiki-CVS[at]lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-cvs

Wikipedia mediawiki-cvs RSS feed   Index | Next | Previous | View Threaded
 
 


Interested in having your list archived? Contact lists@gossamer-threads.com
 
  Web Applications & Managed Hosting Powered by Gossamer Threads Inc.