Skip to content

Commit

Permalink
Update report.php (#1588)
Browse files Browse the repository at this point in the history
This should improve #1581

If checks that parameter $_GET['id'] is passed (it's then casted to int by processor.php) but ONLY if the report.php script is called directly.
This first part of the check is necessary because report.php is included in Mage::printException()
  • Loading branch information
fballiano authored May 28, 2021
1 parent 308ad52 commit 4d2ce08
Showing 1 changed file with 2 additions and 0 deletions.
2 changes: 2 additions & 0 deletions errors/report.php
Original file line number Diff line number Diff line change
Expand Up @@ -24,6 +24,8 @@
* @license http://opensource.org/licenses/osl-3.0.php Open Software License (OSL 3.0)
*/

if ($_SERVER['SCRIPT_FILENAME'] == __FILE__ && (!isset($_GET['id']) || strlen($_GET['id']) == 0)) die("Missing parameter: id");

require_once 'processor.php';

$processor = new Error_Processor();
Expand Down

0 comments on commit 4d2ce08

Please sign in to comment.