plugins/SpecialAdmin.php
changeset 161 e1a22031b5bd
parent 142 ca9118d9c0f2
child 165 d53cc29308f4
child 173 91127e62f38f
equal deleted inserted replaced
160:bed9d04fa144 161:e1a22031b5bd
  2832       
  2832       
  2833     }
  2833     }
  2834     
  2834     
  2835     if(isset($_GET['action']) && isset($_GET['id']))
  2835     if(isset($_GET['action']) && isset($_GET['id']))
  2836     {
  2836     {
  2837       if(preg_match('#^([0-9]*)$#', $_GET['id']))
  2837       if(!preg_match('#^([0-9]*)$#', $_GET['id']))
  2838       {
  2838       {
  2839       } else {
       
  2840         echo '<div class="warning-box">Error with action: $_GET["id"] was not an integer, aborting to prevent SQL injection</div>';
  2839         echo '<div class="warning-box">Error with action: $_GET["id"] was not an integer, aborting to prevent SQL injection</div>';
  2841       }
  2840       }
  2842       switch($_GET['action'])
  2841       switch($_GET['action'])
  2843       {
  2842       {
  2844         case 'new':
  2843         case 'new':