Security fixes. Ensure that numeric values are actually numeric using is_numeric

so users can't login as admin by passing in non-numeric values.
2005-03-23 23:56:38 +00:00
parent d4bde62c23
commit 06ea1b6d3d
6 changed files with 8 additions and 8 deletions
--- a/include/application.php
+++ b/include/application.php
@@ -31,7 +31,7 @@ class Application {
    function Application($iAppId = null)
    {
        // we are working on an existing application
-        if($iAppId)
+        if(is_numeric($iAppId))
        {
            /*
             * We fetch application data and versionsIds.