Security fixes. Ensure that numeric values are actually numeric using is_numeric

so users can't login as admin by passing in non-numeric values.
This commit is contained in:
Jonathan Ernst
2005-03-23 23:56:38 +00:00
committed by WineHQ
parent d4bde62c23
commit 06ea1b6d3d
6 changed files with 8 additions and 8 deletions

View File

@@ -28,7 +28,7 @@ class Screenshot {
function Screenshot($iScreenshotId = null)
{
// we are working on an existing screenshot
if($iScreenshotId)
if(is_numeric($iScreenshotId))
{
$sQuery = "SELECT appData.*, appVersion.appId AS appId
FROM appData, appVersion