diff options
| author | Dries Buytaert <dries@buytaert.net> | 2010-06-01 09:24:09 +0000 |
|---|---|---|
| committer | Dries Buytaert <dries@buytaert.net> | 2010-06-01 09:24:09 +0000 |
| commit | d297ac7464fd8a307910052d7e391ae6588f9451 (patch) | |
| tree | 632707373dcd1f6f598348036985a94d207d6d4d /includes/database/mysql | |
| parent | cf822bd236e119b62ea31159588f0d03d2aa79bf (diff) | |
| download | brdo-d297ac7464fd8a307910052d7e391ae6588f9451.tar.gz brdo-d297ac7464fd8a307910052d7e391ae6588f9451.tar.bz2 | |
- Patch #811776 by Heine: regresssion of SA-2006-005 - SQL Injection via db_query_range().
Diffstat (limited to 'includes/database/mysql')
| -rw-r--r-- | includes/database/mysql/database.inc | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/includes/database/mysql/database.inc b/includes/database/mysql/database.inc index 77779f992..4e03539e5 100644 --- a/includes/database/mysql/database.inc +++ b/includes/database/mysql/database.inc @@ -59,7 +59,7 @@ class DatabaseConnection_mysql extends DatabaseConnection { } public function queryRange($query, $from, $count, array $args = array(), array $options = array()) { - return $this->query($query . ' LIMIT ' . $from . ', ' . $count, $args, $options); + return $this->query($query . ' LIMIT ' . (int) $from . ', ' . (int) $count, $args, $options); } public function queryTemporary($query, array $args = array(), array $options = array()) { |