From 15e708ae893f19f5df7756efb6099d83417f4259 Mon Sep 17 00:00:00 2001
From: Benny Baumann <BenBE@geshi.org>
Date: Tue, 19 Feb 2013 18:29:21 +0100
Subject: bug 964: Be a bit more paranoid here ...

---
 includes/keygen.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

(limited to 'includes/keygen.php')

diff --git a/includes/keygen.php b/includes/keygen.php
index da80aa0..09ec7f9 100644
--- a/includes/keygen.php
+++ b/includes/keygen.php
@@ -43,7 +43,7 @@ if (array_key_exists('HTTP_USER_AGENT',$_SERVER) && strstr($_SERVER['HTTP_USER_A
 
 	<form method="post" style="display:none" action="account.php"
 			id="CertReqForm">
-		<input type="hidden" name="oldid" value="<?=$id?>" />
+		<input type="hidden" name="oldid" value="<?=intval($id)?>" />
 		<input type="hidden" id="CSR" name="CSR" />
 		<input type="hidden" name="keytype" value="MS" />
 
@@ -122,7 +122,7 @@ if (array_key_exists('HTTP_USER_AGENT',$_SERVER) && strstr($_SERVER['HTTP_USER_A
 			<?=_("Keysize:")?> <keygen name="SPKAC" challenge="<? $_SESSION['spkac_hash']=make_hash(); echo $_SESSION['spkac_hash']; ?>">
 
 			<input type="submit" name="submit" value="<?=_("Create Certificate Request")?>">
-			<input type="hidden" name="oldid" value="<?=$id?>">
+			<input type="hidden" name="oldid" value="<?=intval($id)?>">
 		</form>
 	</p>
 <? }
-- 
cgit v1.2.1