Cart Quantity Security Flaw Patch

[michael_s]

Easier method IMO.

edit catalog/includes/application_top.php

find

case 'update_product' : ...


find this line in that section

$cart->add_cart($HTTP_POST_VARS['products_id'][$i], $HTTP_POST_VARS['cart_quantity'][$i], $attributes, false);


and add above it

if ((int)$HTTP_POST_VARS['cart_quantity'][$i] > 9999999) {
$HTTP_POST_VARS['cart_quantity'][$i] = 9999999;
}

change the first 9999999 to the maximum amount allowed... any value over that will automatically be set to the second 9999999 maximum amount..

file included contains only this text.

insaini

More...