[geeklog-devel] [geeklog-cvs] Geeklog-1.x/public_html usersettings.php, 1.175, 1.176

[Dirk Haun]

Blaine Lang wrote:

>      $A['cooktime'] = COM_applyFilter ($A['cooktime'], true);
>!     // If not set or possibly removed from template - set to user default
>!     // So code after this does not fail the user password required test
>!     if (empty($A['cooktime'])) {
>!         $A['cooktime'] = $_USER['cookietimeout'];
>      }

Hmm. If it isn't set, then there should be a check for isset(...)
_before_ the COM_applyFilter. And this change doesn't handle invalid
timeout values (less than zero) any more.

Blaine?

bye, Dirk


-- 
http://www.geeklog.net/
http://geeklog.info/