From 2b24c031483c271b18f8f6efa868f98ff6ed7cdc Mon Sep 17 00:00:00 2001
From: Sebastian <trendschau@gmail.com>
Date: Sun, 3 Jun 2018 22:14:29 +0200
Subject: [PATCH] Version 1.1.7 Improved Session Management

---
 cache/lastCache.txt                       |  2 +-
 system/Controllers/SettingsController.php | 14 +++++++++++---
 themes/typemill/page.twig                 |  4 +++-
 3 files changed, 15 insertions(+), 5 deletions(-)

diff --git a/cache/lastCache.txt b/cache/lastCache.txt
index 930d02c..8f7385b 100644
--- a/cache/lastCache.txt
+++ b/cache/lastCache.txt
@@ -1 +1 @@
-1527608103
\ No newline at end of file
+1528043723
\ No newline at end of file
diff --git a/system/Controllers/SettingsController.php b/system/Controllers/SettingsController.php
index cb14db7..34d4cf3 100644
--- a/system/Controllers/SettingsController.php
+++ b/system/Controllers/SettingsController.php
@@ -38,9 +38,17 @@ class SettingsController extends Controller
 		
 			if($newSettings)
 			{
-				$copyright 					= $this->getCopyright();
-				$newSettings['startpage'] 	= isset($newSettings['startpage']) ? true : false;
+				/* make sure only allowed fields are stored */
+				$newSettings = array(
+					'title' 	=> $newSettings['title'],
+					'author' 	=> $newSettings['author'],
+					'copyright' => $newSettings['copyright'],
+					'year'		=> $newSettings['year'],
+					'statpage' 	=> isset($newSettings['startpage']) ? true : false
+				);
 				
+				$copyright 					= $this->getCopyright();
+								
 				$validate->settings($newSettings, $copyright, 'settings');
 			}
 			
@@ -572,7 +580,7 @@ class SettingsController extends Controller
 			"None"
 		);
 	}
-	
+		
 	private function getLanguages()
 	{
 		return array(
diff --git a/themes/typemill/page.twig b/themes/typemill/page.twig
index 8e93c3e..c078b48 100644
--- a/themes/typemill/page.twig
+++ b/themes/typemill/page.twig
@@ -3,10 +3,12 @@
 	<h1>{{ item.name }}</h1>
 
 {% endif %}
+
+<h1>{{ }}</h1>
 	
 {{ content }}
 
-{% if settings.themes.typemill.modified %}	
+{% if settings.themes.typemill.modified %}
 	<p><small>{{ settings.themes.typemill.modifiedText }}: {{ item.modified|date(settings.themes.typemill.modifiedFormat) }}</small></p>
 {% endif %}