Fixed cross-site scripting vulnerability.

slims · Mar 16, 2017 · 5fcdabc · 5fcdabc · matlam · Mar 30, 2017
1 parent 62b8ee8
commit 5fcdabc
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/template/default/detail_template.php b/template/default/detail_template.php
@@ -1,4 +1,6 @@
 <?php
+$_GET['id'] = (integer) htmlspecialchars($_GET['id']);
+#$_GET['id'] = (integer) $_GET['id'];
 // biblio/record detail
 // output the buffer
 ob_start(); /* <- DONT REMOVE THIS COMMAND */