Skip to content
Permalink
Browse files

Security fixes, add int casting

  • Loading branch information...
jmontoyaa committed Jan 18, 2019
1 parent 297f780 commit 662dbd6255e4bf5294ca0572d3f322609a1ee3f9
Showing with 4 additions and 3 deletions.
  1. +4 −3 main/inc/lib/social.lib.php
@@ -1647,11 +1647,12 @@ public static function getWallMessages(
$tblMessage = Database::get_main_table(TABLE_MESSAGE);
$tblMessageAttachment = Database::get_main_table(TABLE_MESSAGE_ATTACHMENT);
$userId = intval($userId);
$parentId = (int) $parentId;
$userId = (int) $userId;
$start = Database::escape_string($start);
$limit = intval($limit);
$offset = (int) $offset;
$messageStatus = (int) $messageStatus;
$parentId = (int) $parentId;
$sql = "SELECT
id,

0 comments on commit 662dbd6

Please sign in to comment.
You can’t perform that action at this time.