CVE-2017-12909

burpheart · Aug 14, 2020 · 38a2d6e · 38a2d6e
1 parent 177d822
commit 38a2d6e
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/modtask.php b/modtask.php
@@ -25,7 +25,7 @@ function puke()
 }
 if ($action == "edituser")
 {
-	$userid = $_POST["userid"];
+	$userid = sqlesc($_POST["userid"]);
 	$class = 0 + $_POST["class"];
 	$vip_added = ($_POST["vip_added"] == 'yes' ? 'yes' : 'no');
 	$vip_until = ($_POST["vip_until"] ? $_POST["vip_until"] : '0000-00-00 00:00:00');