Patch by Brian Duggan <bduggan@oven.com> -- security improvements.

git-svn-id: svn://10.0.0.236/trunk@62314 18797224-902f-48f8-a5cc-f745e15eee43
This commit is contained in:
terry%mozilla.org
2000-03-07 18:23:00 +00:00
parent 675ff68238
commit 6af1f6f35a
6 changed files with 13 additions and 5 deletions

View File

@@ -29,7 +29,7 @@ ConnectToDatabase();
my @row;
if (defined $::FORM{'attach_id'}) {
SendSQL("select mimetype, thedata from attachments where attach_id = $::FORM{'attach_id'}");
SendSQL("select mimetype, thedata from attachments where attach_id =".SqlQuote($::FORM{'attach_id'});
@row = FetchSQLData();
}
if (!@row) {