cvs: php-master-web /manage user-notes.php
| From: | Felipe Pena | Date: | Fri, 18 Apr 2008 16:45:19 +0000 |
| Subject: | cvs: php-master-web /manage user-notes.php | ||
| Groups: | php.webmaster | ||
| Request: | Send a blank email to php-webmaster+get-1568@lists.php.net to get a copy of this message | ||
felipe Fri Apr 18 16:45:19 2008 UTC
Modified files:
/php-master-web/manage user-notes.php
Log:
- Prevent XSS
http://cvs.php.net/viewvc.cgi/php-master-web/manage/user-notes.php?r1=1.65&r2=1.66&diff_format=u
Index: php-master-web/manage/user-notes.php
diff -u php-master-web/manage/user-notes.php:1.65 php-master-web/manage/user-notes.php:1.66
--- php-master-web/manage/user-notes.php:1.65 Fri Apr 18 15:51:05 2008
+++ php-master-web/manage/user-notes.php Fri Apr 18 16:45:18 2008
@@ -1,5 +1,5 @@
<?php
-// $Id: user-notes.php,v 1.65 2008/04/18 15:51:05 felipe Exp $
+// $Id: user-notes.php,v 1.66 2008/04/18 16:45:18 felipe Exp $
// Force login before action can be taken
include_once 'login.inc';
@@ -71,7 +71,7 @@
$sql .= ' LIMIT 20';
} else {
$page = (int)$_REQUEST["page"];
- $type = isset($_REQUEST["type"]) ? $_REQUEST["type"] : 0;
+ $type = isset($_REQUEST["type"]) ? intval($_REQUEST["type"]) : 0;
if($page < 0) { $page = 0; }
$limit = $page * 10; $page++;