fixes potential SQL injection vector in Active Record offset()

rjdjohnston · Sep 1, 2011 · 0e85763 · 0e85763
1 parent 886d87c
commit 0e85763
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/system/database/DB_active_rec.php b/system/database/DB_active_rec.php
@@ -894,7 +894,7 @@ public function limit($value, $offset = '')
 	 */
 	public function offset($offset)
 	{
-		$this->ar_offset = $offset;
+		$this->ar_offset = (int) $offset;
 		return $this;
 	}