Uploaded image for project: 'phpBB3'
  1. phpBB3
  2. PHPBB3-7183

Missing validation for image dimensions

    XMLWordPrintable

Details

    • Bug
    • Status: Closed (View Workflow)
    • Resolution: Fixed
    • 3.0.0
    • 3.0.1
    • ACP
    • None
    • PHP Environment:
      Database:

    Description

      As far I can see, there is no Integer Validation on Image Dimension Settings, such as Avatar Dimensions, Attachment Dimensions etc. in the ACP. It is possible to enter values of the type string. This may cause problems in later usage.

      Since the corresponding variables are explicitly set to false, I'm not sure, if this is a bug or the intended behaviour.

      For example: acp_board.php , Line 105.

      'avatar_min_height'        => false, 'avatar_min_width' => false, 'avatar_max_height' => false, 'avatar_max_width' => false,  

      Attachments

        Activity

          People

            Kellanved Kellanved [X] (Inactive)
            bantu Andreas Fischer [X] (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: