diff --git a/www/account.php b/www/account.php index 4811538..f6908b3 100644 --- a/www/account.php +++ b/www/account.php @@ -53,7 +53,7 @@ showfooter(); exit; } else if($id == 51 && $_GET['img'] == "show") { - $query = "select * from `tverify` where `id`='".$_GET['photoid']."' and `modified`=0"; + $query = "select * from `tverify` where `id`='".intval($_GET['photoid'])."' and `modified`=0"; $res = mysql_query($query); if(mysql_num_rows($res)) {