Merge pull request #25 from joomlatools/feature/24-security

Port security fixes from Joomla v3.4.6 - v3.4.8
joomlatools · Mar 7, 2016 · 8ff8fad · 8ff8fad
2 parents e55e2e2 + ba6810c
commit 8ff8fad
Showing 1 changed file with 5 additions and 2 deletions.
diff --git a/administrator/components/com_content/models/article.php b/administrator/components/com_content/models/article.php
@@ -483,9 +483,12 @@ public function save($data)
 				// Adding self to the association
 				$associations = $data['associations'];
 
+                // Unset any invalid associations
+                $associations = Joomla\Utilities\ArrayHelper::toInteger($associations);
+
 				foreach ($associations as $tag => $id)
 				{
-					if (empty($id))
+					if (!$id)
 					{
 						unset($associations[$tag]);
 					}
@@ -525,7 +528,7 @@ public function save($data)
 
 					foreach ($associations as $id)
 					{
-						$query->values($id . ',' . $db->quote('com_content.item') . ',' . $db->quote($key));
+						$query->values((int) $id . ',' . $db->quote('com_content.item') . ',' . $db->quote($key));
 					}
 
 					$db->setQuery($query);