min pagesize = 1

diff --git a/blog/preferences.php b/blog/preferences.php
index ca458dd1884db5989cd94956112218787bf45348..5f677911f9898c6bf1540bdac8a1e466227ad7c8 100755 (executable)
--- a/blog/preferences.php
+++ b/blog/preferences.php
@@ -33,7 +33,11 @@
        if ($post = data_submitted()) {
         print_header();
 
-        set_user_preference('blogpagesize', optional_param('pagesize', 10, PARAM_INT));
+        $pagesize = optional_param('pagesize', 10, PARAM_INT);
+        if ($pagesize < 1 ) {
+            error ('invalid page size');
+        }
+        set_user_preference('blogpagesize', $pagesize);
         redirect($referrer, get_string('changessaved'), 1);
         exit;
     }