Skip to content

Commit

Permalink
Prevent sql injection through the ids of the blog comments
Browse files Browse the repository at this point in the history
  • Loading branch information
carakas committed Mar 23, 2022
1 parent 1b38e33 commit 6aca30e
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion src/Backend/Modules/Blog/Engine/Model.php
Expand Up @@ -501,7 +501,7 @@ public static function getComments(array $ids): array
'SELECT *
FROM blog_comments AS i
WHERE i.id IN (' . implode(', ', array_fill(0, count($ids), '?')) . ')',
$ids
array_map('intval', $ids)
);
}

Expand Down

0 comments on commit 6aca30e

Please sign in to comment.