Add input validation to admin pages

2011-12-29 18:40:00 +00:00
parent c94c64d546
commit cbb10636ef
4 changed files with 82 additions and 52 deletions
--- a/source/webui/pages/admin/add-incident.php
+++ b/source/webui/pages/admin/add-incident.php
@@ -4,12 +4,13 @@ $main = StatusBoard_Main::instance();
 $request = $main->request();
 $auth = $main->auth();
 $session = $main->session();
-$messages = array();

 if ( ! $auth->isAuthenticated() || ! $auth->hasPermission(StatusBoard_Permission::PERM_UpdateIncidents)) {
    throw new StatusBoard_Exception_NotAuthorised();
 }

+$messages = array();
+
 if ($request->exists('do')) {
    
    $service_id = StatusBoard_Main::issetelse($_POST['service'], 'Sihnon_Exception_InvalidParameters');