[FIX] - admin/checkimages.php

[thunderstrike]

Detail: Check for variable for right result.

Find:

$num_newimages = $HTTP_POST_VARS['num_newimages'];
$detailed = $HTTP_POST_VARS['detailed'];

replace:

Code: [Select]

$num_newimages = (isset($HTTP_POST_VARS['num_newimages'])) ? intval(trim($HTTP_POST_VARS['num_newimages'])) : 0;
$detailed = (isset($HTTP_POST_VARS['detailed'])) ? trim($HTTP_POST_VARS['detailed']) : "";

Find:

$image_media_file = trim($HTTP_POST_VARS['image_media_file_'.$i]);
$image_thumb_file = trim($HTTP_POST_VARS['image_thumb_file_'.$i]);
$image_name = trim($HTTP_POST_VARS['image_name_'.$i]);

$cat_id = intval($HTTP_POST_VARS['cat_id_'.$i]);
$old_cat_id = intval($HTTP_POST_VARS['old_cat_id_'.$i]);

replace:

Code: [Select]

$image_media_file = (isset($HTTP_POST_VARS['image_media_file_'.$i]) && is_local_file($HTTP_POST_VARS['image_media_file_'.$i])) ? trim($HTTP_POST_VARS['image_media_file_'.$i]) : "";
$image_thumb_file = (isset($HTTP_POST_VARS['image_thumb_file_'.$i]) && is_local_file($HTTP_POST_VARS['image_thumb_file_'.$i])) ? trim($HTTP_POST_VARS['image_thumb_file_'.$i]) : "";
$image_name = (isset($HTTP_POST_VARS['image_name_'.$i])) ? trim($HTTP_POST_VARS['image_name_'.$i]) : "";

$cat_id = (isset($HTTP_POST_VARS['cat_id_'.$i])) ? intval(trim($HTTP_POST_VARS['cat_id_'.$i])) : 0;
$old_cat_id = isset($HTTP_POST_VARS['old_cat_id_'.$i])) ? intval($HTTP_POST_VARS['old_cat_id_'.$i]) : 0;

Find:

$image_active = intval($HTTP_POST_VARS['image_active_'.$i]);
$image_allow_comments = intval($HTTP_POST_VARS['image_allow_comments_'.$i]);

replace:

Code: [Select]

$image_active = (isset($HTTP_POST_VARS['image_active_'.$i])) ? intval(trim($HTTP_POST_VARS['image_active_'.$i])) : 0;
$image_allow_comments = (isset($HTTP_POST_VARS['image_allow_comments_'.$i])) ? intval(trim($HTTP_POST_VARS['image_allow_comments_'.$i])) : 0;