prevent SQLi

This commit is contained in:
appchecker 2016-07-07 20:19:05 +03:00 committed by GitHub
parent f911450017
commit 931089a924

View File

@ -125,7 +125,7 @@ if (empty($reshook))
// Remove a notification
if ($action == 'delete')
{
$sql = "DELETE FROM ".MAIN_DB_PREFIX."notify_def where rowid=".$_GET["actid"];
$sql = "DELETE FROM ".MAIN_DB_PREFIX."notify_def where rowid=".intval($_GET["actid"]);
$db->query($sql);
}
}