<?
defined('C5_EXECUTE') or die("Access Denied.");
?>
<div style="height: 100%">
<? foreach($_REQUEST['cvID'] as $cvID) {
	$tabs[] = array('view-version-' . $cvID, t('Version %s', $cvID), $checked);
	$checked = false;
} 
print $ih->tabs($tabs);			

foreach($_REQUEST['cvID'] as $cvID) { ?>

	<div id="ccm-tab-content-view-version-<?=$cvID?>" style="display: <?=$display?>; height: 100%">
	<iframe border="0" id="v<?=time()?>" frameborder="0" height="100%" width="100%" src="<?=REL_DIR_FILES_TOOLS_REQUIRED?>/pages/preview_version?cvID=<?=$cvID?>&amp;cID=<?=$_REQUEST['cID']?>" />
	</div>
	
	<? if ($display == 'block') {
		$display = 'none';
	} ?>

<? } ?>
</div>
<?
defined('C5_EXECUTE') or die("Access Denied.");
$val = \Core::make('helper/validation/numbers');

$cID = 0;
if ($val->integer($_REQUEST['cID'])) {
    $cID = $_REQUEST['cID'];
}
if (!is_array($_REQUEST['cvID'])) {
    die(t('Invalid Request.'));
}

?>
<div style="height: 100%">
<?
$tabs = array();
foreach ($_REQUEST['cvID'] as $key => $cvID) {
    if (!$val->integer($cvID)) {
        unset($_REQUEST['cvID'][$key]);
    } else {
        $tabs[] = array('view-version-' . $cvID, t('Version %s', $cvID), $checked);
        $checked = false;
    }
}
print $ih->tabs($tabs);

foreach ($_REQUEST['cvID'] as $cvID) { ?>

	<div id="ccm-tab-content-view-version-<?=$cvID?>" style="display: <?=$display?>; height: 100%">
	<iframe border="0" id="v<?=time()?>" frameborder="0" height="100%" width="100%" src="<?=REL_DIR_FILES_TOOLS_REQUIRED?>/pages/preview_version?cvID=<?=$cvID?>&amp;cID=<?=$cID?>" />
	</div>
	
	<? if ($display == 'block') {
		$display = 'none';
	} ?>

<? } ?>
</div>
Add additional validation to request parameters
Add additional validation to request parameters

H1 59701
