beco/simulador-mob-out-ari-poli
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity

clamp negative inputs to 0 server-side (HTML min="0" is client-only)

Browse Source
This commit is contained in:
Ruben Carlo Benante
2026-06-29 17:00:01 -03:00
parent 26431b6da4
commit ede6d8d36e
1 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
simuladormobout.php
View File

@@ -147,7 +147,10 @@ function validar_entrada(){
$entradas = array(); $entradas = array();
foreach ($campos as $campo) { foreach ($campos as $campo) {
if (isset($_POST[$campo]) && $_POST[$campo] !== '') { if (isset($_POST[$campo]) && $_POST[$campo] !== '') {
$entradas[$campo] = (float) limpaPost($_POST[$campo]); // Clampa negativos em 0: nenhum campo legitimo (notas, contagens,
// selecoes) e negativo; isto neutraliza POST adulterado, ja que o
// min="0" do HTML so vale no navegador.
$entradas[$campo] = max(0, (float) limpaPost($_POST[$campo]));
} else { } else {
$entradas[$campo] = 0; $entradas[$campo] = 0;
} }