Project

General

Profile

Actions

Bug #25298

closed

No "=" sign is allowed in value part of flashvars of MEDIA element

Added by Kai Vogel about 13 years ago. Updated over 6 years ago.

Status:
Closed
Priority:
Should have
Assignee:
-
Category:
-
Target version:
Start date:
2011-03-10
Due date:
% Done:

100%

Estimated time:
TYPO3 Version:
4.5
PHP Version:
5.2
Tags:
Complexity:
Is Regression:
No
Sprint Focus:

Description

Problem:
-------------------------
In File "class.tslib_content_media.php" in line 158 the flashvars will be exploded at the "=" sign into key and value. But all "=" signs in the value part are exploded too. Such a value is possible for e.g. an URL to get a dynamic XML for the flash application: index.php?id=2&type=96

Solution:
-------------------------
The trimExplode must be called with an fourth parameter to limit the parts to two.

Change:
$valueParts = t3lib_div::trimExplode('=', $parts1, TRUE);

To:
$valueParts = t3lib_div::trimExplode('=', $parts1, TRUE, 2);

(issue imported from #M17913)

Actions

Also available in: Atom PDF