fixed the first two of http://www.atutor.ca/atutor/mantis/view.php?id=2607

diff --git a/docs/include/html/course_properties.inc.php b/docs/include/html/course_properties.inc.php
index 4b25ddd..a0de963 100644 (file)
--- a/docs/include/html/course_properties.inc.php
+++ b/docs/include/html/course_properties.inc.php
@@ -16,6 +16,8 @@ if (!defined('AT_INCLUDE_PATH')) { exit; }
 require_once(AT_INCLUDE_PATH.'lib/filemanager.inc.php');
 require_once(AT_INCLUDE_PATH.'lib/admin_categories.inc.php');
 
+$_GET['show_courses'] = $addslashes(intval($_GET['show_courses']));
+$_GET['current_cat'] = $addslashes(intval($_GET['current_cat']));
 
 if (($_POST['setvisual'] && !$_POST['settext']) || $_GET['setvisual']) {
        load_editor('banner');