From 149d0aa5d3163cc089c3606670819e18d9928dff Mon Sep 17 00:00:00 2001 From: lavigor <lavigor@users.noreply.github.com> Date: Sat, 15 Sep 2018 12:07:30 +0300 Subject: [PATCH] [ticket/13713] Cast topic_id to integer in the topic source PHPBB3-13713 --- phpBB/phpbb/mention/source/topic.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/phpBB/phpbb/mention/source/topic.php b/phpBB/phpbb/mention/source/topic.php index 5418e4af85..51b855e97b 100644 --- a/phpBB/phpbb/mention/source/topic.php +++ b/phpBB/phpbb/mention/source/topic.php @@ -60,7 +60,7 @@ class topic extends base_user 'ON' => 't.topic_id = p.topic_id' ], ], - 'WHERE' => 'p.topic_id = ' . $topic_id . ' + 'WHERE' => 'p.topic_id = ' . (int) $topic_id . ' AND ' . $this->db->sql_in_set('u.user_type', [USER_NORMAL, USER_FOUNDER]), 'ORDER_BY' => 'p.post_time DESC' ]);