Update getHistoryChatData.php

Wrap intval around $sid in attempt to close exploit
mk386 · Jan 27, 2022 · 1980f9f · 1980f9f
1 parent 6cff93e
commit 1980f9f
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/ajaxchat/getHistoryChatData.php b/ajaxchat/getHistoryChatData.php
@@ -63,7 +63,7 @@
 }
 
 if (isset($_GET["sid"])) {
-    $sid = ((int)$_GET["sid"]); # getting shout id (sid)
+    $sid = ((int)intval($_GET["sid"])); # getting shout id (sid)
 
     $post = $_POST["shoutid"]; # setting shout id
     $post = str_replace("'", "\'", $post); # our textarea string replacement for preview