From a7ba9b2d59e593f096d9ef6ea8fb9f3d2897d888 Mon Sep 17 00:00:00 2001 From: Paal Braathen Date: Thu, 5 Mar 2015 19:49:53 +0100 Subject: [PATCH] Remove SQL injection --- inside/file.php | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/inside/file.php b/inside/file.php index b08affa..ad1c192 100644 --- a/inside/file.php +++ b/inside/file.php @@ -7,6 +7,9 @@ $conn =& DB_connect(); $id = $_GET['id']; +if (!preg_match('/^\d+$/', $id)) + die("That's not an id"); + $nodelist = array(); // Pull file meta-data @@ -56,4 +59,4 @@ for ($i = 0 ; $i < count($nodelist) ; $i++) { } } -?> \ No newline at end of file +?>