mirror of
https://git.tt-rss.org/git/tt-rss.git
synced 2025-12-13 17:35:56 +00:00
force cast profile id to integer when assigning to session variable
This commit is contained in:
@@ -8,7 +8,7 @@ class RPC extends Handler_Protected {
|
||||
}
|
||||
|
||||
function setprofile() {
|
||||
$_SESSION["profile"] = clean($_REQUEST["id"]);
|
||||
$_SESSION["profile"] = (int) clean($_REQUEST["id"]);
|
||||
|
||||
// default value
|
||||
if (!$_SESSION["profile"]) $_SESSION["profile"] = null;
|
||||
|
||||
Reference in New Issue
Block a user