Fixed SQL injections

pull/1/head
root 17 years ago
parent 7bfa208a4e
commit 9fe6225bf7

@ -13,9 +13,9 @@
PARTICULAR PURPOSE. See the License for more details.
*/ ?>
<?
$query = "select * from `orgdomains` where `id`='".$_REQUEST[domid]."'";
$query = "select * from `orgdomains` where `id`='".intval($_REQUEST[domid])."'";
$row = mysql_fetch_assoc(mysql_query($query));
$query = "select * from `orginfo` where `id`='".$_REQUEST[orgid]."'";
$query = "select * from `orginfo` where `id`='".intval($_REQUEST[orgid])."'";
$org = mysql_fetch_assoc(mysql_query($query));
$_SESSION[_config][domain] = $row[domain];

Loading…
Cancel
Save