diff --git a/www/verify.php b/www/verify.php
index c9088f5..8e0aa89 100644
--- a/www/verify.php
+++ b/www/verify.php
@@ -63,7 +63,7 @@
 		{
 			$query = "update `email` set `hash`='',`modified`=NOW() where `id`='$emailid'";
 			mysql_query($query);
-			$query = "update `users` set `verified`='1' where `id`='$row[memid]' and `email`='$row[email]' and `verified`='0'";
+			$query = "update `users` set `verified`='1' where `id`='".intval($row['memid'])."' and `email`='".$row['email']."' and `verified`='0'";
 			mysql_query($query);
 			showheader(_("Updated"), _("Updated"));
 			echo _("Your account and/or email address has been verified. You can now start issuing certificates for this address.");
@@ -104,7 +104,7 @@
 				showfooter();
 				exit;
 			}
-			$query = "update `domains` set `attempts`='$row[attempts]' where `id`='$domainid'";
+			$query = "update `domains` set `attempts`='".intval($row['attempts'])."' where `id`='$domainid'";
 			mysql_query($query);
 		}