replaced intval() around $web_service_id with $addslashes()

diff --git a/docs/include/classes/DAO/UsersDAO.class.php b/docs/include/classes/DAO/UsersDAO.class.php
index b159ee6..ba3ca3b 100644 (file)
--- a/docs/include/classes/DAO/UsersDAO.class.php
+++ b/docs/include/classes/DAO/UsersDAO.class.php
@@ -314,7 +314,8 @@ class UsersDAO extends DAO {
         */
        public function getUserByWebServiceID($webServiceID)
        {
-           $webServiceID = intval($webServiceID);
+               global $addslashes;
+           $webServiceID = $addslashes($webServiceID);
                $sql = "SELECT * FROM ".TABLE_PREFIX."users WHERE web_service_id='".$webServiceID."'";
                if ($rows = $this->execute($sql))
                {