Improved register_globals

pages/wot/13.php

@@ -22,8 +22,8 @@ if(array_key_exists('location',$_REQUEST) && $_REQUEST['location'] != "") {
 		$bits = explode(",", $_REQUEST['location']);
 
 		$loc = trim(mysql_escape_string($bits['0']));
-		$reg = trim(mysql_escape_string($bits['1']));
-		$ccname = trim(mysql_escape_string($bits['2']));
+		$reg = ''; if(array_key_exists('1',$bits)) $reg=trim(mysql_escape_string($bits['1']));
+		$ccname = ''; if(array_key_exists('2',$bits)) $ccname=trim(mysql_escape_string($bits['2']));
 		$query = "select `locations`.`id` as `locid` from `locations`, `regions`, `countries` where
 			`locations`.`name` like '$loc%' and `regions`.`name` like '$reg%' and `countries`.`name` like '$ccname%' and
 			`locations`.`regid`=`regions`.`id` and `locations`.`ccid`=`countries`.`id`