upgraded to fit new shcgi revision, slightly better input validation, switched to...

[busy] / actions / wikiedit.sh

diff --git a/actions/wikiedit.sh b/actions/wikiedit.sh
index 12b9874083b0fea5f3fc197eea6a07f9bf716fdd..6033604bbcae4f375dd8912974a37cf662fcdfca 100755 (executable)
--- a/actions/wikiedit.sh
+++ b/actions/wikiedit.sh
@@ -18,12 +18,12 @@
 $ACL_WIKIEDIT || echo "Location: ?p=Error&i=noaccess\n\n"
 $ACL_WIKIEDIT || exit 0
 
-info="$(echo "$_GET[\"i\"]" |grep -Ex '[0-9]{10}_[0-9]{3}')"
+info="$(printf %s\\n "${_GET[i]}" |grep -Ex '[0-9]{10}_[0-9]{3}')"
 [ -f "$_DATA/Wiki/$info.lock" ] && rm "$_DATA/Wiki/$info.lock"
 
 cgi_post
-page="$_POST[\"page\"]"
-[ -n "$_POST[\"cancel\"]" ] && cancel=true
+page="${_POST[page]}"
+[ -n "${_POST[cancel]}" ] && cancel=true
 
 [ -z "$cancel" -a -f "$_DATA/Wiki/$info" ] && mv "$_DATA/Wiki/$info" "$_DATA/Wiki/$info.$(date +%s)"
 [ -z "$cancel" ] && echo -e "${page}" >"$_DATA/Wiki/$info"