[pLog-svn] r6594 - plog/branches/lifetype-1.2/class/action/admin

[mark at devel.lifetype.net]

Author: mark
Date: 2008-06-19 12:43:40 -0400 (Thu, 19 Jun 2008)
New Revision: 6594

Modified:
   plog/branches/lifetype-1.2/class/action/admin/adminadminblogselectaction.class.php
Log:
Filtered the _nextAction and check the _nextAction exist or not before we use it.

Modified: plog/branches/lifetype-1.2/class/action/admin/adminadminblogselectaction.class.php
===================================================================
--- plog/branches/lifetype-1.2/class/action/admin/adminadminblogselectaction.class.php	2008-06-19 16:08:36 UTC (rev 6593)
+++ plog/branches/lifetype-1.2/class/action/admin/adminadminblogselectaction.class.php	2008-06-19 16:43:40 UTC (rev 6594)
@@ -59,14 +59,10 @@
             $session["SessionInfo"]->setValue( "blogId", $blogInfo->getId() );
             HttpVars::setSession( $session );
 			
-			/*print_r($session);
-			die();*/
-			
-			// check if there was any redirection
-            // TODO: validate
-			$this->_nextAction = $this->_request->getValue( "action" );
+			lt_include( PLOG_CLASS_PATH."/class/data/filter/htmlfilter.class.php" );
+	        $this->_nextAction = $this->_request->getFilteredValue( "action", new HtmlFilter() );
 
-			if ( $this->_nextAction ) {
+			if ( $this->_nextAction && AdminController::checkActionExist( $this->_nextAction ) ) {
 				AdminController::setForwardAction( $this->_nextAction );
 		    } else {
 				AdminController::setForwardAction( "newPost" );