diff options
| author | Karl 'vollmerk' Vollmer <vollmer@ampache.org> | 2006-02-08 21:29:51 +0000 |
|---|---|---|
| committer | Karl 'vollmerk' Vollmer <vollmer@ampache.org> | 2006-02-08 21:29:51 +0000 |
| commit | 5343c30ff528ca886cd9a581d30cd9c6bfe9d2e4 (patch) | |
| tree | f15cb58f7d71e2a588d9bb77aa8115f90a3963ed /lib/class/rating.class.php | |
| parent | 2c21726d0f70357059d7c6ca75d5dec3e38d879b (diff) | |
| download | ampache-5343c30ff528ca886cd9a581d30cd9c6bfe9d2e4.tar.gz ampache-5343c30ff528ca886cd9a581d30cd9c6bfe9d2e4.tar.bz2 ampache-5343c30ff528ca886cd9a581d30cd9c6bfe9d2e4.zip | |
fixed a few more unescaped ids
Diffstat (limited to 'lib/class/rating.class.php')
| -rw-r--r-- | lib/class/rating.class.php | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/lib/class/rating.class.php b/lib/class/rating.class.php index 136d212e..e79ea0ef 100644 --- a/lib/class/rating.class.php +++ b/lib/class/rating.class.php @@ -41,8 +41,8 @@ class Rating { */ function Rating($id,$type) { - $this->id = $id; - $this->type = $type; + $this->id = intval($id); + $this->type = sql_escape($type); if (intval($id) > 1) { $this->get_average(); |