potential SQL injection

Piwigo · Dec 21, 2014 · 0cdd1c3 · 0cdd1c3
1 parent 2dfd046
commit 0cdd1c3
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/include/guestbook.inc.php b/include/guestbook.inc.php
@@ -160,7 +160,7 @@
 
 // navigation bar creation
 $page['start'] = 0;
-if (isset($_GET['start']))
+if (isset($_GET['start']) && is_numeric($_GET['start']) && $_GET['start'] >= 0)
 {
   $page['start'] = $_GET['start'];
 }