From 23e3c0a1a7327713559beff0548a960f0deb5687 Mon Sep 17 00:00:00 2001 From: "Paul S. Owen" Date: Sun, 7 Apr 2002 14:59:33 +0000 Subject: [PATCH] A few more missed intval's git-svn-id: file:///svn/phpbb/branches/phpBB-2_0_0@2503 89ea8834-ac86-4346-8a33-228a782c2dd0 --- phpBB/modcp.php | 6 +++--- phpBB/posting.php | 2 +- phpBB/viewforum.php | 2 +- 3 files changed, 5 insertions(+), 5 deletions(-) diff --git a/phpBB/modcp.php b/phpBB/modcp.php index 1293de3a7a..3c870ff8d7 100644 --- a/phpBB/modcp.php +++ b/phpBB/modcp.php @@ -343,7 +343,7 @@ switch( $mode ) $topics = $HTTP_POST_VARS['topic_id_list']; for($i = 0; $i < count($topics); $i++) { - $hidden_fields .= ''; + $hidden_fields .= ''; } } else @@ -391,7 +391,7 @@ switch( $mode ) $topic_list = ''; for($i = 0; $i < count($topics); $i++) { - $topic_list .= ( ( $topic_list != '' ) ? ', ' : '' ) . $topics[$i]; + $topic_list .= ( ( $topic_list != '' ) ? ', ' : '' ) . intval($topics[$i]); } $sql = "SELECT * @@ -624,7 +624,7 @@ switch( $mode ) message_die(GENERAL_MESSAGE, $lang['Empty_subject']); } - $new_forum_id = $HTTP_POST_VARS['new_forum_id']; + $new_forum_id = intval($HTTP_POST_VARS['new_forum_id']); $topic_time = time(); $sql = "INSERT INTO " . TOPICS_TABLE . " (topic_title, topic_poster, topic_time, forum_id, topic_status, topic_type) diff --git a/phpBB/posting.php b/phpBB/posting.php index 93286ccfb7..5418ff7a5d 100644 --- a/phpBB/posting.php +++ b/phpBB/posting.php @@ -442,7 +442,7 @@ else if ( $mode == 'vote' ) // if ( !empty($HTTP_POST_VARS['vote_id']) ) { - $vote_option_id = $HTTP_POST_VARS['vote_id']; + $vote_option_id = intval($HTTP_POST_VARS['vote_id']); $sql = "SELECT vd.vote_id FROM " . VOTE_DESC_TABLE . " vd, " . VOTE_RESULTS_TABLE . " vr diff --git a/phpBB/viewforum.php b/phpBB/viewforum.php index 65c05f9426..480e0730a6 100644 --- a/phpBB/viewforum.php +++ b/phpBB/viewforum.php @@ -34,7 +34,7 @@ if ( isset($HTTP_GET_VARS[POST_FORUM_URL]) || isset($HTTP_POST_VARS[POST_FORUM_U } else if ( isset($HTTP_GET_VARS['forum'])) { - $forum_id = $HTTP_GET_VARS['forum']; + $forum_id = intval($HTTP_GET_VARS['forum']); } else {