From 22ae507450d274b32ad35a4f63b4080f50ecb50a Mon Sep 17 00:00:00 2001 From: spiderr Date: Sun, 23 Sep 2018 16:03:01 -0400 Subject: verifyIdParameter for board_id --- BitBoardPost.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/BitBoardPost.php b/BitBoardPost.php index fc624d4..7997417 100644 --- a/BitBoardPost.php +++ b/BitBoardPost.php @@ -283,7 +283,7 @@ class BitBoardPost extends LibertyComment { $this->getServicesSql( 'content_list_sql_function', $selectSql, $joinSql, $whereSql, $bindVars, $this ); - if( !empty( $pListHash['board_id'] ) ) { + if( BitBase::verifyIdParameter( $pListHash, 'board_id' ) ) { $joinSql .= "INNER JOIN `".BIT_DB_PREFIX."boards` b ON (b.`content_id` = bm.`board_content_id`)"; $whereSql .= ' AND b.`board_id`=? '; array_push( $bindVars, (int)$pListHash['board_id'] ); -- cgit v1.3