mirror of
https://github.com/lkddi/nexusphp.git
synced 2026-04-24 12:07:23 +08:00
Fix some potential security hazards
This commit is contained in:
@@ -5,7 +5,7 @@ require_once(get_langfile_path());
|
||||
loggedinorreturn();
|
||||
|
||||
parked();
|
||||
$userid = $_GET["id"];
|
||||
$userid = intval($_GET["id"] ?? 0);
|
||||
int_check($userid,true);
|
||||
|
||||
if ($CURUSER["id"] != $userid && !user_can('viewhistory'))
|
||||
|
||||
Reference in New Issue
Block a user