Skip to content

Commit

Permalink
Fixed security bug, moved setting of $sid to before include statement…
Browse files Browse the repository at this point in the history
… to stop use of bad $sid's before it is checked/converted to "int" type.

git-svn-id: file:///Users/Shitiz/Downloads/lssvn/trunk/unstable@754 b72ed6b6-b9f8-46b5-92b4-906544132732
  • Loading branch information
jcleeland committed Oct 28, 2003
1 parent 551689d commit 632c4fa
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion index.php
Expand Up @@ -38,7 +38,7 @@
session_start();

if (!isset($sid)) {$sid=returnglobal('sid');}
settype($sid, "integer");
if (phpversion() >= '4.2.0') {settype($sid, "int");} else {settype($sid, "integer");}

include("./admin/config.php");

Expand Down

0 comments on commit 632c4fa

Please sign in to comment.