Fixed XSS

17 years ago · e9bddc7c28
parent 8eb2a6102d
commit e9bddc7c28
1 changed files with 1 additions and 1 deletions
--- a/pages/account/52.php
+++ b/pages/account/52.php
@ -48,7 +48,7 @@
 <?=_("Comment")?>: <input type="text" name="comment"><br>
 <input type="submit" name="agree" value="<?=_("I agree with this Application")?>">
 <input type="submit" name="disagree" value="<?=_("I don't agree with this Application")?>">
-<input type="hidden" name="oldid" value="<?=$_GET['id']?>">
+<input type="hidden" name="oldid" value="<?=intval($_GET['id'])?>">
 <input type="hidden" name="uid" value="<?=$uid?>">
 </form>
 <? } else {