index.php
changeset 826 dcf5381ce8ba
parent 801 eb8b23f11744
child 832 7152ca0a0ce9
equal deleted inserted replaced
825:9d5c04c1414f 826:dcf5381ce8ba
   279       echo $hist;
   279       echo $hist;
   280       $template->footer();
   280       $template->footer();
   281       break;
   281       break;
   282     case 'rollback':
   282     case 'rollback':
   283       $id = (isset($_GET['id'])) ? $_GET['id'] : false;
   283       $id = (isset($_GET['id'])) ? $_GET['id'] : false;
   284       if(!$id || !preg_match('#^([0-9]+)$#', $id)) die_friendly('Invalid action ID', '<p>The URL parameter "id" is not an integer. Exiting to prevent nasties like SQL injection, etc.</p>');
   284       if(!$id || !ctype_digit($id)) die_friendly('Invalid action ID', '<p>The URL parameter "id" is not an integer. Exiting to prevent nasties like SQL injection, etc.</p>');
   285       
   285       
   286       $id = intval($id);
   286       $id = intval($id);
   287       
   287       
   288       $page = new PageProcessor($paths->page_id, $paths->namespace);
   288       $page = new PageProcessor($paths->page_id, $paths->namespace);
   289       $result = $page->rollback_log_entry($id);
   289       $result = $page->rollback_log_entry($id);