Fix XSS bug

To test use the following on browse.php. I used Firefox to test without any anti script software. browse.php?id=1&PAGE=3'%22()%26%25<ScRiPt%20>prompt(984815)</ScRiPt>
renlok · Mar 26, 2014 · 1e66c86 · 1e66c86
1 parent a330cf6
commit 1e66c86
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/browse.php b/browse.php
@@ -182,7 +182,7 @@
 	}
 	else
 	{
-		$PAGE = $_REQUEST['PAGE'];
+		$PAGE = intval($_REQUEST['PAGE']);
 		$OFFSET = ($PAGE - 1) * $system->SETTINGS['perpage'];
 	}
 	$PAGES = ceil($TOTALAUCTIONS / $system->SETTINGS['perpage']);
@@ -235,4 +235,4 @@
 		));
 $template->display('body');
 include 'footer.php';
-?>
+?>