From 58d6c6b442b9d11595557f704e025d5b639704c8 Mon Sep 17 00:00:00 2001 From: pecesama Date: Wed, 7 Nov 2007 18:13:23 +0000 Subject: [PATCH] SQLql injection patch by Pedro Laguna --- index.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/index.php b/index.php index 0ab25d6..4daa665 100644 --- a/index.php +++ b/index.php @@ -25,7 +25,7 @@ $template = new plantillas($conf->template); if (isset($_GET["post"])) { $id_post = $_GET["post"]; - if (!is_numeric($id_post) && $id_post < 1 ){ + if (!is_numeric($id_post) || $id_post < 1 ){ header("Location: index.php"); } } else {