cvs: docweb /include lib_revcheck.inc.php

nlopess		Sun Feb  5 21:59:27 2006 UTC

  Modified files:              
    /docweb/include	lib_revcheck.inc.php 
  Log:
  fix another sql injection bug
  
http://cvs.php.net/viewcvs.cgi/docweb/include/lib_revcheck.inc.php?r1=1.12&r2=1.13&diff_format=u
Index: docweb/include/lib_revcheck.inc.php
diff -u docweb/include/lib_revcheck.inc.php:1.12 docweb/include/lib_revcheck.inc.php:1.13
--- docweb/include/lib_revcheck.inc.php:1.12	Sun Feb  5 20:44:50 2006
+++ docweb/include/lib_revcheck.inc.php	Sun Feb  5 21:59:27 2006
@@ -103,7 +103,7 @@
     AND
         c.lang="en" 
     AND
-        a.dir = "' . $dir . '"
+        a.dir = "' . (int)$dir . '"
     AND
         a.revision != c.revision order by b.name';
     $result = sqlite_query($idx, $sql);