Improved parameter checking
This commit is contained in:
parent
a71504fc3a
commit
ae56e3ca62
1 changed files with 1 additions and 1 deletions
|
@ -53,7 +53,7 @@
|
||||||
$password = mysql_escape_string(stripslashes(trim($_REQUEST["pword"])));
|
$password = mysql_escape_string(stripslashes(trim($_REQUEST["pword"])));
|
||||||
$URL = mysql_escape_string(trim($_REQUEST["notaryURL"]));
|
$URL = mysql_escape_string(trim($_REQUEST["notaryURL"]));
|
||||||
$CN = mysql_escape_string($_SESSION['_config']['CN']);
|
$CN = mysql_escape_string($_SESSION['_config']['CN']);
|
||||||
$memid = mysql_escape_string($_SESSION['_config']['uid']);
|
$memid = intval($_SESSION['_config']['uid']);
|
||||||
$user = mysql_fetch_assoc(mysql_query("select * from `users` where `id`='$memid'"));
|
$user = mysql_fetch_assoc(mysql_query("select * from `users` where `id`='$memid'"));
|
||||||
$tmp = mysql_fetch_assoc(mysql_query("select sum(`points`) as `points` from `notary` where `to`='$memid'"));
|
$tmp = mysql_fetch_assoc(mysql_query("select sum(`points`) as `points` from `notary` where `to`='$memid'"));
|
||||||
|
|
||||||
|
|
Loading…
Reference in a new issue