CVE-2017-12776

burpheart · Aug 14, 2020 · 9a5e046 · 9a5e046
1 parent 38a2d6e
commit 9a5e046
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/takeupdate.php b/takeupdate.php
@@ -11,13 +11,13 @@ function bark($msg) {
 if (get_user_class() < $staffmem_class)
        permissiondenied();
 if ($_POST['setdealt']){
-$res = sql_query ("SELECT id FROM reports WHERE dealtwith=0 AND id IN (" . implode(", ", $_POST[delreport]) . ")");
+$res = sql_query ("SELECT id FROM reports WHERE dealtwith=0 AND id IN (" . sqlesc(implode(", ", $_POST[delreport])) . ")");
 while ($arr = mysql_fetch_assoc($res))
 	sql_query ("UPDATE reports SET dealtwith=1, dealtby = $CURUSER[id] WHERE id = $arr[id]") or sqlerr();
 	$Cache->delete_value('staff_new_report_count');
 }
 elseif ($_POST['delete']){
-$res = sql_query ("SELECT id FROM reports WHERE id IN (" . implode(", ", $_POST[delreport]) . ")");
+$res = sql_query ("SELECT id FROM reports WHERE id IN (" . sqlescimplode(", ", $_POST[delreport])) . ")");
 while ($arr = mysql_fetch_assoc($res))
 	sql_query ("DELETE from reports WHERE id = $arr[id]") or sqlerr();
 	$Cache->delete_value('staff_new_report_count');