[TYPO3-core] FYI24: #14129: Function tslib_cObj::getTreeList() inserts records with empty PK

[Dmitry Dulepov]

Hi!

This is SVN patch request.

Type: bug, trivial

Branches: 4.2, 4.3, trunk

BT reference: http://bugs.typo3.org/view.php?id=14129

Problem: if passed id is not numeric, the function will incorrectly insert
a record to the database with an empty primary key. This happens because
insert block is outside of the condition that checks the validity of the id.

Solution: move insertion inside the condition.

-- 
Dmitry Dulepov
TYPO3 expert / TYPO3 security team member
Read more @ http://dmitry-dulepov.com/
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: 14129.diff
URL: <http://lists.typo3.org/pipermail/typo3-team-core/attachments/20100415/ab924b9f/attachment.asc>