diff --git a/classes/actions/ActionLogin.class.php b/classes/actions/ActionLogin.class.php index e25667f1..8ecc1d68 100644 --- a/classes/actions/ActionLogin.class.php +++ b/classes/actions/ActionLogin.class.php @@ -45,7 +45,7 @@ class ActionLogin extends Action { /** * Если нажали кнопку "Войти" */ - if (isPost('submit_login')) { + if (isPost('submit_login') and is_string(getRequest('login')) and is_string(getRequest('password'))) { /** * Проверяем есть ли такой юзер по логину */ diff --git a/engine/include/function.php b/engine/include/function.php index 6f02a7a6..e1a23ca3 100644 --- a/engine/include/function.php +++ b/engine/include/function.php @@ -166,6 +166,9 @@ function func_stripslashes(&$data) { * @return unknown */ function func_check($sValue,$sParam,$iMin=1,$iMax=100) { + if (is_array($sValue)) { + return false; + } switch($sParam) { case 'id': if (preg_match("/^\d{".$iMin.','.$iMax."}$/",$sValue)){ return true; } break;