Improved SQL-Injection protection

16 years ago · ec17da606c
parent b12f68c61d
commit ec17da606c
1 changed files with 2 additions and 2 deletions
--- a/www/disputes.php
+++ b/www/disputes.php
@ -277,8 +277,8 @@
 		}

 		$hash = make_hash();
-		$query = "insert into `disputeemail` set `email`='$email',`memid`='".$_SESSION['profile']['id']."',
-				`oldmemid`='$oldmemid',`created`=NOW(),`hash`='$hash',`id`='$emailid',
+		$query = "insert into `disputeemail` set `email`='$email',`memid`='".intval($_SESSION['profile']['id'])."',
+				`oldmemid`='$oldmemid',`created`=NOW(),`hash`='$hash',`id`='".intval($emailid)."',
 				`IP`='".$_SERVER['REMOTE_ADDR']."'";
 		mysql_query($query);