Get the IDs from $_REQUEST and check if they are numeric.

appbrowse.php

@@ -22,9 +22,17 @@ function admin_menu()
     $m->done();
 }
 
+$catId = $_REQUEST['catId'];
+
 if(!$catId)
     $catId = 0; // ROOT
 
+if( !is_numeric($catId) )
+{
+	errorpage("Something went wrong with the category ID");
+	exit;
+}
+
 // list sub categories
 $cat = new Category($catId);
 $catFullPath = make_cat_path($cat->getCategoryPath());

appview.php

@@ -231,6 +231,15 @@ function display_versions($appId, $versions)
 
 /* code to VIEW an application & versions */
 
+$appId = $_REQUEST['appId'];
+$versionId = $_REQUEST['versionId'];
+
+if(!is_numeric($appId))
+{
+	errorpage("Something went wrong with the IDs");
+	exit;
+}
+
 if($appId && !$versionId)
 {
 	$app = new Application($appId);