(bug 10154) Don't allow user to specify days beyond $wgRCMaxAge

diff --git a/RELEASE-NOTES b/RELEASE-NOTES
index 43881c6..1b5474f 100644 (file)
--- a/RELEASE-NOTES
+++ b/RELEASE-NOTES
@@ -15,6 +15,7 @@ production.
 === New features in 1.19 ===
 
 === Bug fixes in 1.19 ===
+* (bug 10154) Don't allow user to specify days beyond $wgRCMaxAge.
 
 === API changes in 1.19 ===
 

diff --git a/includes/specials/SpecialRecentchanges.php b/includes/specials/SpecialRecentchanges.php
index a9e1cda..9677252 100644 (file)
--- a/includes/specials/SpecialRecentchanges.php
+++ b/includes/specials/SpecialRecentchanges.php
@@ -68,10 +68,11 @@ class SpecialRecentChanges extends IncludableSpecialPage {
         * @return FormOptions
         */
        public function setup( $parameters ) {
-               global $wgRequest;
+               global $wgRequest, $wgRCMaxAge;
 
                $opts = $this->getDefaultOptions();
                $opts->fetchValuesFromRequest( $wgRequest );
+               $opts->validateIntBounds( 'days', 1, $wgRCMaxAge / ( 3600 * 24 ) );
 
                // Give precedence to subpage syntax
                if( $parameters !== null ) {