Changeset 6909

Timestamp:

Sep 13, 2010, 11:10:27 PM (14 years ago)

Author:

plg

Message:

bug 1850 fixed: strong check of $_GETcat

File:

• branches/2.1/comments.php (modified) (1 diff)

branches/2.1/comments.php

@@ -105 +105 @@
 if (isset($_GET['cat']) and 0 != $_GET['cat'])
 {
+  check_input_parameter('cat', $_GET, false, PATTERN_ID);
+  
   $page['where_clauses'][] =
     'category_id IN ('.implode(',', get_subcat_ids(array($_GET['cat']))).')';