diff options
| author | Benny Baumann <BenBE@geshi.org> | 2014-04-30 20:13:28 +0200 |
|---|---|---|
| committer | Benny Baumann <BenBE@geshi.org> | 2014-04-30 20:18:56 +0200 |
| commit | 7f02d479140d2c47e9359191ed2a7d687c6b9a33 (patch) | |
| tree | fd72a22729f6fb9575396a3a4443e2c0f76c3991 /stamp | |
| parent | 2801b166026e48e2133ac5e8ba68f3d699c4dbd2 (diff) | |
| download | cacert-devel-7f02d479140d2c47e9359191ed2a7d687c6b9a33.tar.gz cacert-devel-7f02d479140d2c47e9359191ed2a7d687c6b9a33.tar.xz cacert-devel-7f02d479140d2c47e9359191ed2a7d687c6b9a33.zip | |
bug 1138: And yet another bunch of escaping
Diffstat (limited to 'stamp')
| -rw-r--r-- | stamp/common.php | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/stamp/common.php b/stamp/common.php index d0a71f4..d99a23a 100644 --- a/stamp/common.php +++ b/stamp/common.php @@ -41,9 +41,9 @@ if($row['certid'] > 0) { if($row['org'] == 0) - $query = "select * from `domaincerts` where `id`='$row[certid]' and `expire`>NOW() and `revoked`=0"; + $query = "select * from `domaincerts` where `id`='".intval($row['certid'])."' and `expire`>NOW() and `revoked`=0"; else - $query = "select * from `orgdomaincerts` where `id`='$row[certid]' and `expire`>NOW() and `revoked`=0"; + $query = "select * from `orgdomaincerts` where `id`='".intval($row['certid'])."' and `expire`>NOW() and `revoked`=0"; if($_REQUEST['debug'] == 1) echo $query."<br>\n"; $res = mysql_query($query); |