Security fix
This commit is contained in:
parent
92f94decd7
commit
c86a61ca7b
@ -13,7 +13,9 @@ function openGraphHeader($photoID) {
|
|||||||
|
|
||||||
global $database;
|
global $database;
|
||||||
|
|
||||||
|
$photoID = mysqli_real_escape_string($database, $photoID);
|
||||||
if (!is_numeric($photoID)) return false;
|
if (!is_numeric($photoID)) return false;
|
||||||
|
|
||||||
$result = $database->query("SELECT * FROM lychee_photos WHERE id = '$photoID';");
|
$result = $database->query("SELECT * FROM lychee_photos WHERE id = '$photoID';");
|
||||||
$row = $result->fetch_object();
|
$row = $result->fetch_object();
|
||||||
|
|
||||||
|
Loading…
Reference in New Issue
Block a user