prevent SQLi
This commit is contained in:
parent
f911450017
commit
931089a924
@ -125,7 +125,7 @@ if (empty($reshook))
|
||||
// Remove a notification
|
||||
if ($action == 'delete')
|
||||
{
|
||||
$sql = "DELETE FROM ".MAIN_DB_PREFIX."notify_def where rowid=".$_GET["actid"];
|
||||
$sql = "DELETE FROM ".MAIN_DB_PREFIX."notify_def where rowid=".intval($_GET["actid"]);
|
||||
$db->query($sql);
|
||||
}
|
||||
}
|
||||
|
||||
Loading…
Reference in New Issue
Block a user