mirror/php-phpbb
1
0
Fork 0
mirror of https://github.com/phpbb/phpbb.git synced 2025-01-19 07:08:09 +01:00
Code Issues Releases Wiki Activity

Merge pull request #5904 from 3D-I/ticket/13914

Browse Source 
[ticket/13914] Cast to INT mixed style ID data in user setup
This commit is contained in:
Marc Alexander 2020-03-15 17:25:46 +01:00
commit 8b8606349e
No known key found for this signature in database
GPG Key ID: 50E0D2423696F995
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
phpBB/phpbb/user.php
View File

@ -262,8 +262,8 @@ class user extends \phpbb\session
}
$sql = 'SELECT *
FROM ' . STYLES_TABLE . " s
WHERE s.style_id = $style_id";
FROM ' . STYLES_TABLE . '
WHERE style_id = ' . (int) $style_id;
$result = $db->sql_query($sql, 3600);
$this->style = $db->sql_fetchrow($result);
$db->sql_freeresult($result);
@ -274,8 +274,8 @@ class user extends \phpbb\session
$style_id = $this->data['user_style'];
$sql = 'SELECT *
FROM ' . STYLES_TABLE . " s
WHERE s.style_id = $style_id";
FROM ' . STYLES_TABLE . '
WHERE style_id = ' . (int) $style_id;
$result = $db->sql_query($sql, 3600);
$this->style = $db->sql_fetchrow($result);
$db->sql_freeresult($result);