Changeset 728 for trunk/phpbms/include/relationships.php

Timestamp:

01/07/10 12:45:17 (2 years ago)

Author:

brieb

Message:

• Fixed possible security loopholes in search screen (SQL Manipulation)

Files:

• trunk/phpbms/include/relationships.php (modified) (1 diff)

trunk/phpbms/include/relationships.php

@@ -102 +102 @@
         */
         foreach($theids as $theid)
-            $_SESSION["passedjoinwhere"] .= " OR ".$therecord["fromtable"].".id = ".$theid;
+            $_SESSION["passedjoinwhere"] .= " OR ".$therecord["fromtable"].".id = ".((int) $theid);
 
         $_SESSION["passedjoinwhere"] = substr($_SESSION["passedjoinwhere"], 3);