diff --git a/phpBB/modcp.php b/phpBB/modcp.php
index 1293de3a7a..3c870ff8d7 100644
--- a/phpBB/modcp.php
+++ b/phpBB/modcp.php
@@ -343,7 +343,7 @@ switch( $mode )
$topics = $HTTP_POST_VARS['topic_id_list'];
for($i = 0; $i < count($topics); $i++)
{
- $hidden_fields .= '';
+ $hidden_fields .= '';
}
}
else
@@ -391,7 +391,7 @@ switch( $mode )
$topic_list = '';
for($i = 0; $i < count($topics); $i++)
{
- $topic_list .= ( ( $topic_list != '' ) ? ', ' : '' ) . $topics[$i];
+ $topic_list .= ( ( $topic_list != '' ) ? ', ' : '' ) . intval($topics[$i]);
}
$sql = "SELECT *
@@ -624,7 +624,7 @@ switch( $mode )
message_die(GENERAL_MESSAGE, $lang['Empty_subject']);
}
- $new_forum_id = $HTTP_POST_VARS['new_forum_id'];
+ $new_forum_id = intval($HTTP_POST_VARS['new_forum_id']);
$topic_time = time();
$sql = "INSERT INTO " . TOPICS_TABLE . " (topic_title, topic_poster, topic_time, forum_id, topic_status, topic_type)
diff --git a/phpBB/posting.php b/phpBB/posting.php
index 93286ccfb7..5418ff7a5d 100644
--- a/phpBB/posting.php
+++ b/phpBB/posting.php
@@ -442,7 +442,7 @@ else if ( $mode == 'vote' )
//
if ( !empty($HTTP_POST_VARS['vote_id']) )
{
- $vote_option_id = $HTTP_POST_VARS['vote_id'];
+ $vote_option_id = intval($HTTP_POST_VARS['vote_id']);
$sql = "SELECT vd.vote_id
FROM " . VOTE_DESC_TABLE . " vd, " . VOTE_RESULTS_TABLE . " vr
diff --git a/phpBB/viewforum.php b/phpBB/viewforum.php
index 65c05f9426..480e0730a6 100644
--- a/phpBB/viewforum.php
+++ b/phpBB/viewforum.php
@@ -34,7 +34,7 @@ if ( isset($HTTP_GET_VARS[POST_FORUM_URL]) || isset($HTTP_POST_VARS[POST_FORUM_U
}
else if ( isset($HTTP_GET_VARS['forum']))
{
- $forum_id = $HTTP_GET_VARS['forum'];
+ $forum_id = intval($HTTP_GET_VARS['forum']);
}
else
{