Skip to content
Permalink
Browse files Browse the repository at this point in the history
fixes potential SQL injection vector in Active Record offset()
  • Loading branch information
kenjis authored and narfbg committed Aug 20, 2015
1 parent c0cd297 commit 0dde92d
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion system/database/DB_active_rec.php
Expand Up @@ -895,7 +895,7 @@ public function limit($value, $offset = '')
*/
public function offset($offset)
{
$this->ar_offset = $offset;
$this->ar_offset = (int) $offset;
return $this;
}

Expand Down

0 comments on commit 0dde92d

Please sign in to comment.