Changeset 1152

Show
Ignore:
Timestamp:
06/14/07 12:27:04 (1 year ago)
Author:
sven
Message:

blog: input validation, patch from Rolando Espinoza La Fuente

Files:

Legend:

Unmodified
Added
Removed
Modified
Copied
Moved

  • devel/mod/blog/lib/weblogs_actions.php

    r1109 r1152  
    189189    // Delete a weblog comment 
    190190    case "weblog_comment_delete": 
    191         $comment_id = optional_param('weblog_comment_delete'); 
     191        $comment_id = optional_param('weblog_comment_delete',0,PARAM_INT); 
    192192        if (logged_on && !empty($comment_id)) { 
    193193            $commentinfo = get_record_sql('SELECT wc.*,wp.owner AS postowner,wp.ident AS postid