Lines 420 and 426 of 7-1.2 contain a flaw. They effectively run the $_GET['q'] and the first query string parameter together.

In practice, that means if your url is http://domain.com/example?one=1&two=2, only $_GET['two'] will be set for programming tasks meant to occur within your block.

Patch attached. Thanks!

CommentFileSizeAuthor
#1 ajaxblock-7.1.2-patch.txt1.08 KBbartclarkson
ajaxblock-7.1.2-patch.txt1.07 KBbartclarkson

Comments

bartclarkson’s picture

bartclarkson commented
StatusFileSize
new ajaxblock-7.1.2-patch.txt1.08 KB

Patch modified slightly to be in keeping with Drupal code standards.

maximpodorov’s picture

maximpodorov commented
Status: Active » Fixed

Thank you very much. These commits fix the problem:
http://drupalcode.org/project/ajaxblocks.git/commit/77e5e5a
http://drupalcode.org/project/ajaxblocks.git/commit/cd3911f

bartclarkson’s picture

bartclarkson commented

Awesome.

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.