AC-4804: Security fixes for XSS, possible sql injection on multiple scripts within...

[acontent.git] / docs / user / user_create_edit.php

diff --git a/docs/user/user_create_edit.php b/docs/user/user_create_edit.php
index f57de56..16e607d 100644 (file)
--- a/docs/user/user_create_edit.php
+++ b/docs/user/user_create_edit.php
@@ -16,6 +16,7 @@ include_once(TR_INCLUDE_PATH.'classes/DAO/UsersDAO.class.php');
 include_once(TR_INCLUDE_PATH.'classes/DAO/UserGroupsDAO.class.php');
 
 // handle submit
+$_GET['id'] = intval($_GET['id']);
 if (isset($_POST['cancel'])) {
        header('Location: index.php');
        exit;