Changeset 725 for trunk/phpbms/include

Timestamp:

01/06/10 22:48:56 (2 years ago)

Author:

brieb

Message:

• Fixed more path disclosure and possible SQL injection bugs in the load search class

Files:

• trunk/phpbms/include/common_functions.php (modified) (1 diff)

trunk/phpbms/include/common_functions.php

@@ -304 +304 @@
                         `".$tablerecord["maintable"]."`
                 WHERE
-                        `id` = ".$id;
+                        `id` = ".((int) $id);
 
         $queryresult = $db->query($querystatement);