diff options
| author | Dries Buytaert <dries@buytaert.net> | 2010-06-01 09:24:09 +0000 |
|---|---|---|
| committer | Dries Buytaert <dries@buytaert.net> | 2010-06-01 09:24:09 +0000 |
| commit | d297ac7464fd8a307910052d7e391ae6588f9451 (patch) | |
| tree | 632707373dcd1f6f598348036985a94d207d6d4d /includes/database/sqlite/database.inc | |
| parent | cf822bd236e119b62ea31159588f0d03d2aa79bf (diff) | |
| download | drupal-d297ac7464fd8a307910052d7e391ae6588f9451.tar.gz drupal-d297ac7464fd8a307910052d7e391ae6588f9451.zip | |
- Patch #811776 by Heine: regresssion of SA-2006-005 - SQL Injection via db_query_range().
Diffstat (limited to 'includes/database/sqlite/database.inc')
| -rw-r--r-- | includes/database/sqlite/database.inc | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/includes/database/sqlite/database.inc b/includes/database/sqlite/database.inc index 98ffe32d65a2..5dc8cff38ce5 100644 --- a/includes/database/sqlite/database.inc +++ b/includes/database/sqlite/database.inc @@ -159,7 +159,7 @@ class DatabaseConnection_sqlite extends DatabaseConnection { } public function queryRange($query, $from, $count, array $args = array(), array $options = array()) { - return $this->query($query . ' LIMIT ' . $from . ', ' . $count, $args, $options); + return $this->query($query . ' LIMIT ' . (int) $from . ', ' . (int) $count, $args, $options); } public function queryTemporary($query, array $args = array(), array $options = array()) { |