Ignore:
Timestamp:
Sep 23, 2023, 12:04:04 AM (14 months ago)
Author:
chronos
Message:
  • Fixed: Numeric check for input values.
File:
1 edited

Legend:

Unmodified
Added
Removed
  • trunk/Modules/Log/Log.php

    r957 r958  
    6161
    6262    $Items = array();
    63     if (array_key_exists('type', $_GET)) $Where = ' WHERE `Type` = "'.($_GET['type'] * 1).'"';
     63    if (array_key_exists('type', $_GET) and is_numeric($_GET['type'])) $Where = ' WHERE `Type` = "'.($_GET['type'] * 1).'"';
    6464      else $Where = '';
    6565    $sql = 'SELECT *, UNIX_TIMESTAMP(`Time`) AS `TimeCreate`, (SELECT `User`.`Name` FROM `User` WHERE `User`.`Id` = `Log`.`User`) AS `UserName`, `Time` FROM `Log`'.
Note: See TracChangeset for help on using the changeset viewer.