From 99c6fdda710b6c0b7d6c01be6961560430512eb5 Mon Sep 17 00:00:00 2001
From: fisharebest <fisharebest@gmail.com>
Date: Thu, 13 May 2010 06:00:53 +0000
Subject: #579752 New Block configuration - On This Day

---
 index_edit.php | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

(limited to 'index_edit.php')

diff --git a/index_edit.php b/index_edit.php
index f75d2116f2..60aa5e512a 100644
--- a/index_edit.php
+++ b/index_edit.php
@@ -34,8 +34,13 @@ define('WT_SCRIPT_NAME', 'index_edit.php');
 require './includes/session.php';
 require_once WT_ROOT.'includes/index_cache.php';
 
+$ctype=safe_REQUEST($_REQUEST, 'ctype', array('user', 'gedcom'));
+
+if (!$ctype) {
+	die("Internal error - missing ctype parameter");
+}
+
 if (isset($_REQUEST['action'])) $action = $_REQUEST['action'];
-if (isset($_REQUEST['ctype'])) $ctype = $_REQUEST['ctype'];
 if (isset($_REQUEST['main'])) $main = $_REQUEST['main'];
 if (isset($_REQUEST['right'])) $right = $_REQUEST['right'];
 if (isset($_REQUEST['setdefault'])) $setdefault = $_REQUEST['setdefault'];
@@ -55,7 +60,6 @@ if (!WT_USER_ID) {
 if (!WT_USER_IS_ADMIN) $setdefault=false;
 
 if (!isset($action)) $action='';
-if (!isset($ctype)) $ctype='user';
 if (!isset($main)) $main=array();
 if (!isset($right)) $right=array();
 if (!isset($setdefault)) $setdefault=false;
-- 
cgit v1.3