From 65e4c163cbe24618d1aaaa96f9e0059bc7488d5c Mon Sep 17 00:00:00 2001 From: Linus Torvalds Date: Tue, 25 Aug 2020 15:44:06 +0000 Subject: [PATCH] Restrict maximum posts per page to 50 in global and local feed --- Web/Presenters/WallPresenter.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Web/Presenters/WallPresenter.php b/Web/Presenters/WallPresenter.php index 62383868..1b45ff49 100644 --- a/Web/Presenters/WallPresenter.php +++ b/Web/Presenters/WallPresenter.php @@ -86,7 +86,7 @@ final class WallPresenter extends OpenVKPresenter }, iterator_to_array($subs)); $ids[] = $this->user->id; - $perPage = (int) ($_GET["posts"] ?? OPENVK_DEFAULT_PER_PAGE); + $perPage = min((int) ($_GET["posts"] ?? OPENVK_DEFAULT_PER_PAGE), 50); $posts = DatabaseConnection::i() ->getContext() ->table("posts") @@ -110,7 +110,7 @@ final class WallPresenter extends OpenVKPresenter $this->assertUserLoggedIn(); $page = (int) ($_GET["p"] ?? 1); - $pPage = (int) ($_GET["posts"] ?? OPENVK_DEFAULT_PER_PAGE); + $pPage = min((int) ($_GET["posts"] ?? OPENVK_DEFAULT_PER_PAGE), 50); $posts = DatabaseConnection::i() ->getContext() ->table("posts")