summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorMichael Tänzer <neo@nhng.de>2014-05-01 01:31:19 +0200
committerMichael Tänzer <neo@nhng.de>2014-05-01 02:11:07 +0200
commit5cae905afb7b9075cf3f2a7287908f937551d2b7 (patch)
treeffdf40a7a5a2d8df72c3631326b5ad738f669dea
parentdebc6736b5f380d6a023389f3151fe5a2cb144cf (diff)
downloadcacert-devel-5cae905afb7b9075cf3f2a7287908f937551d2b7.tar.gz
cacert-devel-5cae905afb7b9075cf3f2a7287908f937551d2b7.tar.xz
cacert-devel-5cae905afb7b9075cf3f2a7287908f937551d2b7.zip
bug 1138: This is an int, no need to mysql_real_escape()
Signed-off-by: Michael Tänzer <neo@nhng.de>
-rw-r--r--pages/account/43.php2
1 files changed, 1 insertions, 1 deletions
diff --git a/pages/account/43.php b/pages/account/43.php
index fb10e69..c889ce3 100644
--- a/pages/account/43.php
+++ b/pages/account/43.php
@@ -130,7 +130,7 @@ if(intval($_REQUEST['userid']) > 0) {
if (!write_se_log($userid, $_SESSION['profile']['id'], 'SE assurance revoke', $ticketno)) {
$ticketmsg=_("Writing to the admin log failed. Can't continue.");
} else {
- $assurance = mysql_real_escape_string(intval($_REQUEST['assurance']));
+ $assurance = intval($_REQUEST['assurance']);
$trow = 0;
$res = mysql_query("select `to` from `notary` where `id`='".intval($assurance)."' and `deleted` = 0");
if ($res) {