Fix issue #89 : meilleure vérification des champs de formulaires (géré par Minz)

app/models/RSSConfiguration.php

@@ -85,7 +85,7 @@ class RSSConfiguration extends Model {
 		$this->language = $value;
 	}
 	public function _postsPerPage ($value) {
-		if (is_int (intval ($value))) {
+		if (is_int (intval ($value)) && $value > 0) {
 			$this->posts_per_page = $value;
 		} else {
 			$this->posts_per_page = 10;
@@ -120,7 +120,7 @@ class RSSConfiguration extends Model {
 		}
 	}
 	public function _oldEntries ($value) {
-		if (is_int (intval ($value))) {
+		if (is_int (intval ($value)) && $value > 0) {
 			$this->old_entries = $value;
 		} else {
 			$this->old_entries = 3;

lib/minz/Request.php

@@ -31,7 +31,12 @@ class Request {
 	}
 	public static function param ($key, $default = false) {
 		if (isset (self::$params[$key])) {
-			return self::$params[$key];
+			$p = self::$params[$key];
+			if(is_array($p)) {
+				return array_map(htmlspecialchars, $p);
+			} else {
+				return htmlspecialchars($p);
+			}
 		} else {
 			return $default;
 		}