From 7bfa208a4ed9a9e51201cb052d7930b170442bf5 Mon Sep 17 00:00:00 2001
From: root <root@www.cacert.org>
Date: Thu, 3 Jan 2008 10:08:07 +0000
Subject: [PATCH] Fixed a SQL injection

---
 pages/account/28.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pages/account/28.php b/pages/account/28.php
index c81e687..e99c7a1 100644
--- a/pages/account/28.php
+++ b/pages/account/28.php
@@ -13,7 +13,7 @@
     PARTICULAR PURPOSE.  See the License for more details.
 */ ?>
 <?
-	$query = "select * from `orginfo` where `id`='".$_REQUEST[orgid]."'";
+	$query = "select * from `orginfo` where `id`='".intval($_REQUEST[orgid])."'";
 	$row = mysql_fetch_assoc(mysql_query($query));
 ?>
 <form method="post" action="account.php">