[geeklog-devel] [geeklog-cvs] Geeklog-1.x/system/classes story.class.php, 1.32, 1.33

Michael Jervis mjervis at gmail.com
Mon Jul 28 03:45:50 EDT 2008



> Btw, this is a nice trap to fall into: COM_sanitizeID will, by default,

> create a new ID instead of returning an empty string. So when 'old_sid'

> is not set, you'll end up with a new ID. Which could have all sorts of

> interesting side effects if you then try to do something clever with

> that supposedly "old" sid ...


Erk, nasty!



More information about the geeklog-devel mailing list