From 5a28be43d32e6764f6edd83d8d7e5d831e06f37d Mon Sep 17 00:00:00 2001
From: Paul Richards <paul@mantisforge.org>
Date: Thu, 26 Jul 2007 21:59:43 +0000
Subject: [PATCH] 0008202: Potential Cross-Site Scripting Flaws

git-svn-id: http://mantisbt.svn.sourceforge.net/svnroot/mantisbt/trunk@4493 f5dc347c-c33d-0410-90a0-b07cc1902cb9
---
 billing_inc.php | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/billing_inc.php b/billing_inc.php
index 339b3dd596..6680c7606f 100644
--- a/billing_inc.php
+++ b/billing_inc.php
@@ -6,7 +6,7 @@
 	# See the README and LICENSE files for details
 
 	# --------------------------------------------------------
-	# $Id: billing_inc.php,v 1.12 2007-07-11 21:13:24 giallu Exp $
+	# $Id: billing_inc.php,v 1.13 2007-07-26 21:59:43 prichards Exp $
 	# --------------------------------------------------------
 ?>
 <?php
@@ -51,9 +51,9 @@
 	$t_bugnote_stats_from_def_m = $t_bugnote_stats_from_def_ar[1];
 	$t_bugnote_stats_from_def_y = $t_bugnote_stats_from_def_ar[2];
 
-	$t_bugnote_stats_from_d = gpc_get_string('start_day', $t_bugnote_stats_from_def_d);
-	$t_bugnote_stats_from_m = gpc_get_string('start_month', $t_bugnote_stats_from_def_m);
-	$t_bugnote_stats_from_y = gpc_get_string('start_year', $t_bugnote_stats_from_def_y);
+	$t_bugnote_stats_from_d = gpc_get_int('start_day', $t_bugnote_stats_from_def_d);
+	$t_bugnote_stats_from_m = gpc_get_int('start_month', $t_bugnote_stats_from_def_m);
+	$t_bugnote_stats_from_y = gpc_get_int('start_year', $t_bugnote_stats_from_def_y);
 
 	$t_bugnote_stats_to_def = $t_today;
 	$t_bugnote_stats_to_def_ar = explode ( ":", $t_bugnote_stats_to_def );
@@ -61,12 +61,12 @@
 	$t_bugnote_stats_to_def_m = $t_bugnote_stats_to_def_ar[1];
 	$t_bugnote_stats_to_def_y = $t_bugnote_stats_to_def_ar[2];
 
-	$t_bugnote_stats_to_d = gpc_get_string('end_day', $t_bugnote_stats_to_def_d);
-	$t_bugnote_stats_to_m = gpc_get_string('end_month', $t_bugnote_stats_to_def_m);
-	$t_bugnote_stats_to_y = gpc_get_string('end_year', $t_bugnote_stats_to_def_y);
+	$t_bugnote_stats_to_d = gpc_get_int('end_day', $t_bugnote_stats_to_def_d);
+	$t_bugnote_stats_to_m = gpc_get_int('end_month', $t_bugnote_stats_to_def_m);
+	$t_bugnote_stats_to_y = gpc_get_int('end_year', $t_bugnote_stats_to_def_y);
 
 	$f_get_bugnote_stats_button = gpc_get_string('get_bugnote_stats_button', '');
-	$f_bugnote_cost = gpc_get_string( 'bugnote_cost', '' );
+	$f_bugnote_cost = gpc_get_int( 'bugnote_cost', '' );
 	$f_project_id = helper_get_current_project();
 
 	if ( ON == config_get( 'time_tracking_with_billing' ) ) {