From: Greg Gay Date: Fri, 30 Sep 2011 17:44:02 +0000 (-0000) Subject: replaced intval() around $web_service_id with $addslashes() X-Git-Tag: v1.2~15 X-Git-Url: https://iam.tj/gitweb/gitweb.cgi?p=acontent.git;a=commitdiff_plain;h=c4f17758b53527599013ccec6043c4840ed17477 replaced intval() around $web_service_id with $addslashes() --- diff --git a/docs/include/classes/DAO/UsersDAO.class.php b/docs/include/classes/DAO/UsersDAO.class.php index b159ee6..ba3ca3b 100644 --- a/docs/include/classes/DAO/UsersDAO.class.php +++ b/docs/include/classes/DAO/UsersDAO.class.php @@ -314,7 +314,8 @@ class UsersDAO extends DAO { */ public function getUserByWebServiceID($webServiceID) { - $webServiceID = intval($webServiceID); + global $addslashes; + $webServiceID = $addslashes($webServiceID); $sql = "SELECT * FROM ".TABLE_PREFIX."users WHERE web_service_id='".$webServiceID."'"; if ($rows = $this->execute($sql)) {