1 files changed, 3 insertions, 0 deletions
diff --git a/doku.php b/doku.php
index 0d6c823ef..5d706ab2e 100644
--- a/doku.php
+++ b/doku.php
@@ -36,6 +36,9 @@
   $SUF   = cleanText($_POST['suffix']);
   $SUM   = $_REQUEST['summary'];
 
+  //sanitize revision
+  $REV = preg_replace('/[^0-9]/','',$REV);
+
   //we accept the do param as HTTP header, too:
   if(!empty($_SERVER['HTTP_X_DOKUWIKI_DO'])){
     $ACT = trim(strtolower($_SERVER['HTTP_X_DOKUWIKI_DO']));