Security fixes. Ensure that numeric values are actually numeric using is_numeric
so users can't login as admin by passing in non-numeric values.
This commit is contained in:
@@ -32,7 +32,7 @@ class Version {
|
||||
function Version($iVersionId = null)
|
||||
{
|
||||
// we are working on an existing version
|
||||
if($iVersionId)
|
||||
if(is_numeric($iVersionId))
|
||||
{
|
||||
/*
|
||||
* We fetch the data related to this version.
|
||||
|
||||
Reference in New Issue
Block a user