[RSS Feed/News] Inconsistent strtotime handling of relative dates from user data

Status
Not open for further replies.

XenForo

Administrative
  • Thread starter
  • Admin
  • #1
In a number of places strtotime is used to parse something like "+$value $unit" from user-input to generate a datetime stamp from a relative time structure.

The problem is this is somewhat inconsistent in a number of places. Most of the time 0 means permanent, but some places have a check against pow(2,32) - 1.

If a bad value is passed in (likely due to editing html or bad templating), then strtotime return false rather than raise an error and silently fails...

Read more

ادامه مطلب...
 
Status
Not open for further replies.
Back
Top Bottom