summaryrefslogtreecommitdiff
path: root/modules/faq.module
diff options
context:
space:
mode:
authorDries Buytaert <dries@buytaert.net>2001-03-07 21:29:40 +0000
committerDries Buytaert <dries@buytaert.net>2001-03-07 21:29:40 +0000
commitf516626a293edd613cb823db88e36dcf7e1fb8f4 (patch)
treeba3dd7432d4d13783e34fbc50a4d4308a142309b /modules/faq.module
parent2b2e81f6cfce285f466c3c74cb25ad30c581d2cf (diff)
downloadbrdo-f516626a293edd613cb823db88e36dcf7e1fb8f4.tar.gz
brdo-f516626a293edd613cb823db88e36dcf7e1fb8f4.tar.bz2
A rather large and important update:
revised most of the SQL queries and tried to make drupal as secure as possible (while trying to avoid redundant/duplicate checks). For drupal's sake, try to screw something up. See the mail about PHPNuke being hacked appr. 6 days ago. The one who finds a problem is rewarded a beer (and I'm willing to ship it to Norway if required). I beg you to be evil. Try dumping a table a la "http://localhost/index.php?date=77778;DROP TABLE users" or something. ;)
Diffstat (limited to 'modules/faq.module')
-rw-r--r--modules/faq.module6
1 files changed, 3 insertions, 3 deletions
diff --git a/modules/faq.module b/modules/faq.module
index 63a40addc..283b8e563 100644
--- a/modules/faq.module
+++ b/modules/faq.module
@@ -106,18 +106,18 @@ function faq_admin() {
faq_add();
break;
case "delete":
- faq_delete($id);
+ faq_delete(check_input($id));
faq_display();
break;
case "edit":
- faq_edit($id);
+ faq_edit(check_input($id));
break;
case "Add FAQ":
faq_add_save($edit);
faq_display();
break;
case "Save FAQ":
- faq_edit_save($id, $edit);
+ faq_edit_save(check_input($id), $edit);
// fall through:
default:
faq_display();