From 9fe6225bf7db95a0abc78fc92e512192ffe95981 Mon Sep 17 00:00:00 2001
From: root <root@www.cacert.org>
Date: Thu, 3 Jan 2008 10:08:17 +0000
Subject: [PATCH] Fixed SQL injections

---
 pages/account/30.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pages/account/30.php b/pages/account/30.php
index 10f5fff..c1ec59e 100644
--- a/pages/account/30.php
+++ b/pages/account/30.php
@@ -13,9 +13,9 @@
     PARTICULAR PURPOSE.  See the License for more details.
 */ ?>
 <?
-	$query = "select * from `orgdomains` where `id`='".$_REQUEST[domid]."'";
+	$query = "select * from `orgdomains` where `id`='".intval($_REQUEST[domid])."'";
 	$row = mysql_fetch_assoc(mysql_query($query));
-	$query = "select * from `orginfo` where `id`='".$_REQUEST[orgid]."'";
+	$query = "select * from `orginfo` where `id`='".intval($_REQUEST[orgid])."'";
 	$org = mysql_fetch_assoc(mysql_query($query));
 
 	$_SESSION[_config][domain] = $row[domain];