From 45feef9f6bdae1f2ed9c386ace5f47f012526a4a Mon Sep 17 00:00:00 2001
From: cweiske <cweiske@b3834d28-1941-0410-a4f8-b48e95affb8f>
Date: Thu, 29 Oct 2009 09:05:37 +0000
Subject: fix several XSS injection problems with page variable

git-svn-id: https://semanticscuttle.svn.sourceforge.net/svnroot/semanticscuttle/trunk@468 b3834d28-1941-0410-a4f8-b48e95affb8f
---
 www/ajax/getadminlinkedtags.php | 2 +-
 www/ajax/getlinkedtags.php      | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

(limited to 'www/ajax')

diff --git a/www/ajax/getadminlinkedtags.php b/www/ajax/getadminlinkedtags.php
index 0a5d813..2b1c3ac 100644
--- a/www/ajax/getadminlinkedtags.php
+++ b/www/ajax/getadminlinkedtags.php
@@ -57,7 +57,7 @@ function displayTag($tag, $uId) {
 
 { label: 'name', identifier: 'id', items: [
 <?php
-$json = displayTag(GET_TAG, GET_UID);
+$json = displayTag(GET_TAG, intval(GET_UID));
 $json = substr($json, 0, -1); // remove final comma avoiding IE6 Dojo bug
 echo $json;
 ?>
diff --git a/www/ajax/getlinkedtags.php b/www/ajax/getlinkedtags.php
index 9415f87..621d1c4 100644
--- a/www/ajax/getlinkedtags.php
+++ b/www/ajax/getlinkedtags.php
@@ -57,7 +57,7 @@ function displayTag($tag, $uId) {
 
 { label: 'name', identifier: 'id', items: [
 <?php
-$json = displayTag(GET_TAG, GET_UID);
+$json = displayTag(GET_TAG, intval(GET_UID));
 $json = substr($json, 0, -1); // remove final comma avoiding IE6 Dojo bug
 echo $json;
 ?>
-- 
cgit v1.2.3