mirror/php-phpbb
1
0
Fork 0
mirror of https://github.com/phpbb/phpbb.git synced 2025-08-10 18:54:08 +02:00
Code Issues Releases Wiki Activity

[ticket/13205] Explicitly cast ids to integers and reformat SQL

Browse Source 
PHPBB3-13205
This commit is contained in:
Nils Adermann
2014-10-22 18:35:07 -04:00
parent b5594371ab
commit df72846b89
2 changed files with 5 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
phpBB/includes/functions_privmsgs.php
View File

@@ -918,10 +918,11 @@ function mark_folder_read($user_id, $folder_id)
{
global $db;
$sql = 'SELECT msg_id FROM ' . PRIVMSGS_TO_TABLE . "
WHERE folder_id = $folder_id
AND user_id = $user_id
AND pm_unread = 1";
$sql = 'SELECT msg_id
FROM ' . PRIVMSGS_TO_TABLE . '
WHERE folder_id = ' . ((int) $folder_id) . '
AND user_id = ' . ((int) $user_id) . '
AND pm_unread = 1';
$result = $db->sql_query($sql);
while ($row = $db->sql_fetchrow($result))