Actions
Bug #25298
closedNo "=" sign is allowed in value part of flashvars of MEDIA element
Start date:
2011-03-10
Due date:
% Done:
100%
Estimated time:
TYPO3 Version:
4.5
PHP Version:
5.2
Tags:
Complexity:
Is Regression:
No
Sprint Focus:
Description
Problem:
-------------------------
In File "class.tslib_content_media.php" in line 158 the flashvars will be exploded at the "=" sign into key and value. But all "=" signs in the value part are exploded too. Such a value is possible for e.g. an URL to get a dynamic XML for the flash application: index.php?id=2&type=96
Solution:
-------------------------
The trimExplode must be called with an fourth parameter to limit the parts to two.
Change:
$valueParts = t3lib_div::trimExplode('=', $parts1, TRUE);
To:
$valueParts = t3lib_div::trimExplode('=', $parts1, TRUE, 2);
(issue imported from #M17913)
Actions