From e9bddc7c289dd39cc6524e8169af6947ac70c55d Mon Sep 17 00:00:00 2001
From: root <root@www.cacert.org>
Date: Tue, 3 Jul 2007 19:52:59 +0000
Subject: [PATCH] Fixed XSS

---
 pages/account/52.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pages/account/52.php b/pages/account/52.php
index 8072e80..2104ac8 100644
--- a/pages/account/52.php
+++ b/pages/account/52.php
@@ -48,7 +48,7 @@
 <?=_("Comment")?>: <input type="text" name="comment"><br>
 <input type="submit" name="agree" value="<?=_("I agree with this Application")?>">
 <input type="submit" name="disagree" value="<?=_("I don't agree with this Application")?>">
-<input type="hidden" name="oldid" value="<?=$_GET['id']?>">
+<input type="hidden" name="oldid" value="<?=intval($_GET['id'])?>">
 <input type="hidden" name="uid" value="<?=$uid?>">
 </form>
 <? } else {