From f51bf614789d2631e53b519ff524083db0629bea Mon Sep 17 00:00:00 2001 From: Ludovic Arnaud Date: Sat, 22 Nov 2003 22:36:13 +0000 Subject: [PATCH] Fixed: better input validation, thanks to Niels Teusink for pointing this one out git-svn-id: file:///svn/phpbb/branches/phpBB-2_0_0@4680 89ea8834-ac86-4346-8a33-228a782c2dd0 --- phpBB/search.php | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/phpBB/search.php b/phpBB/search.php index 80e5683921..fb99d41e2f 100644 --- a/phpBB/search.php +++ b/phpBB/search.php @@ -682,7 +682,8 @@ else if ( $search_keywords != '' || $search_author != '' || $search_id ) } else { - if ( intval($search_id) ) + $search_id = intval($search_id); + if ( $search_id ) { $sql = "SELECT search_array FROM " . SEARCH_TABLE . "