diff --git a/phpBB/modcp.php b/phpBB/modcp.php index 1293de3a7a..3c870ff8d7 100644 --- a/phpBB/modcp.php +++ b/phpBB/modcp.php @@ -343,7 +343,7 @@ switch( $mode ) $topics = $HTTP_POST_VARS['topic_id_list']; for($i = 0; $i < count($topics); $i++) { - $hidden_fields .= ''; + $hidden_fields .= ''; } } else @@ -391,7 +391,7 @@ switch( $mode ) $topic_list = ''; for($i = 0; $i < count($topics); $i++) { - $topic_list .= ( ( $topic_list != '' ) ? ', ' : '' ) . $topics[$i]; + $topic_list .= ( ( $topic_list != '' ) ? ', ' : '' ) . intval($topics[$i]); } $sql = "SELECT * @@ -624,7 +624,7 @@ switch( $mode ) message_die(GENERAL_MESSAGE, $lang['Empty_subject']); } - $new_forum_id = $HTTP_POST_VARS['new_forum_id']; + $new_forum_id = intval($HTTP_POST_VARS['new_forum_id']); $topic_time = time(); $sql = "INSERT INTO " . TOPICS_TABLE . " (topic_title, topic_poster, topic_time, forum_id, topic_status, topic_type) diff --git a/phpBB/posting.php b/phpBB/posting.php index 93286ccfb7..5418ff7a5d 100644 --- a/phpBB/posting.php +++ b/phpBB/posting.php @@ -442,7 +442,7 @@ else if ( $mode == 'vote' ) // if ( !empty($HTTP_POST_VARS['vote_id']) ) { - $vote_option_id = $HTTP_POST_VARS['vote_id']; + $vote_option_id = intval($HTTP_POST_VARS['vote_id']); $sql = "SELECT vd.vote_id FROM " . VOTE_DESC_TABLE . " vd, " . VOTE_RESULTS_TABLE . " vr diff --git a/phpBB/viewforum.php b/phpBB/viewforum.php index 65c05f9426..480e0730a6 100644 --- a/phpBB/viewforum.php +++ b/phpBB/viewforum.php @@ -34,7 +34,7 @@ if ( isset($HTTP_GET_VARS[POST_FORUM_URL]) || isset($HTTP_POST_VARS[POST_FORUM_U } else if ( isset($HTTP_GET_VARS['forum'])) { - $forum_id = $HTTP_GET_VARS['forum']; + $forum_id = intval($HTTP_GET_VARS['forum']); } else {