[ZBX-22594] Input parameters 'sign' and 'data' are not validating properly Created: 2023 Mar 27  Updated: 2024 Apr 10  Resolved: 2023 Jun 09

Status: Closed
Project: ZABBIX BUGS AND ISSUES
Component/s: Frontend (F)
Affects Version/s: None
Fix Version/s: 6.0.19rc1, 6.4.4rc1, 7.0.0alpha2, 7.0 (plan)

Type: Problem report Priority: Trivial
Reporter: Alexander Vladishev Assignee: Miks Kronkalns
Resolution: Fixed Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Causes
caused by ZBXNEXT-5965 Zabbix UI and API must not keep any l... Closed
Team: Team B
Sprint: Sprint 98 (Mar 2023), Sprint 99 (Apr 2023), Sprint 100 (May 2023), Sprint 101 (Jun 2023)
Story Points: 1

 Description   

On any page with an "action" input parameter, adding a combination of "formdata" and "sign[]" or "data[]" parameters results in a PHP fatal error. For example,

zabbix.php?action=host.list&formdata&data[]=
TypeError: base64_decode(): Argument #1 ($string) must be of type string, array given in include/classes/mvc/CController.php:199
Stack trace:
#0 include/classes/mvc/CController.php(199): base64_decode()
#1 include/classes/mvc/CController.php(445): CController::getFormInput()
#2 include/classes/mvc/CController.php(82): CController->populateRawInput()
#3 include/classes/core/ZBase.php(513): CController->__construct()
#4 include/classes/core/ZBase.php(222): ZBase->processRequest()
#5 include/config.inc.php(25): ZBase->run()
#6 zabbix.php(22): require_once('...')
#7 {main}

Also i



 Comments   
Comment by Miks Kronkalns [ 2023 Mar 30 ]

Fixed in development branch feature/ZBX-22594-6.0.

Comment by Miks Kronkalns [ 2023 Jun 02 ]

Fixed in:

Generated at Sun Apr 20 21:07:37 EEST 2025 using Jira 9.12.4#9120004-sha1:625303b708afdb767e17cb2838290c41888e9ff0.