Security fixes. Ensure that numeric values are actually numeric using is_numeric
so users can't login as admin by passing in non-numeric values.
This commit is contained in:
@@ -28,7 +28,7 @@ class Screenshot {
|
||||
function Screenshot($iScreenshotId = null)
|
||||
{
|
||||
// we are working on an existing screenshot
|
||||
if($iScreenshotId)
|
||||
if(is_numeric($iScreenshotId))
|
||||
{
|
||||
$sQuery = "SELECT appData.*, appVersion.appId AS appId
|
||||
FROM appData, appVersion
|
||||
|
||||
Reference in New Issue
Block a user