New uploader doesn't show if the options for large image sizes are not numbers

[westi]

Error: syntax error
Source File: ...wp-admin/media-upload.php?post_id=xxx&
Line: 132, Column: 20
Source Code:
var resize_height = , resize_width = , 

We blindly output the data returned from get_option:

We should:

• Validate it is an integer
• Sanitize what we output

[westi]

Buggy code is here: ​http://core.trac.wordpress.org/browser/trunk/wp-admin/includes/media.php#L1352

[mhauan]

Check that the get_option is a whole number before echoing, and if not echo 1024 that is the standard WordPress size.

[mhauan]

Replaced preg_replace() with absint()

[mhauan]

New patch without inline code.

[nacin]

Patch won't work quite right. That doesn't sanitize get_option( 'large_size_h' ), it only confirms it can be sanitized to a non-zero value.

You want:

$large_size_h = absint( get_option('large_size_h') );
if ( ! $large_size_h )
    $large_size_h = 1024;

[mhauan]

Added new patch. absint( '3asdf' ) will return int(3), and I added a preg_match that checks that the option only contains numbers.

[ryan]

Would a simple is_numeric() suffice?

[mhauan]

Probably, but "1e4" and "9.6" is also numeric. I not sure if that would break the upload script. The size should be a whole number. It might be better to use the ctype_digit() function then?

[mhauan]

New patch using ctype_digit() instead of preg_match().

[nacin]

We can't use ctype_digit(), as it's not available everywhere.

I think absint() is sufficient. We do it all over the place to fine effect. A bit of sanitization followed by validating that it is not 0 (if such a value is invalid in that context).

sanitize_option() sanitizes all of these options with absint() anyway, which leads me to A) wonder how westi did this :-) and B) not at all care about this beyond the JS error and empty/0 values.

[mhauan]

New patch based on nacin's idea. You're right, those values shouldn't be in to the database anyways. What if someone edit that option with update_option() in a plugin or something and caused an error?

[azaozz]

In [19494]:

Sanitize options for resizing in the uploader, props mhauan, nacin, fixes #19399