Do not allow pages > 100

1 files changed, 6 insertions, 0 deletions

diff --git a/www/index.php b/www/index.php
index da7b27c..7c4904b 100644
--- a/www/index.php
+++ b/www/index.php
@@ -15,6 +15,12 @@ if (isset($_GET['page'])) {
     }
     //PEAR Pager begins at 1
     $page = (int)$_GET['page'] - 1;
+
+    if ($page >= 100) {
+        //Elasticsearch by default only allows 100 pages
+        // we do not want exceptions in our logs
+        throw new Exception_Input('List page is too large');
+    }
 }
 
 $perPage = 10;//$GLOBALS['phinde']['perPage'];