MyBB Community Forums

Full Version: ***** Syndication.php ***** SQL error *****
You're currently viewing a stripped down version of our content. View the full version with proper formatting.
Hi,
Please fix this:

http://community.mybboard.net/syndicatio...imit=-9999
Domain/syndication.php?fid=8&limit=-9999
...
Thanks.
Why would the limit be -9999?
LOL. Thats saying Syndication.php IS NOT SECURE!
Why you cleaning input with mysql_real_scape_string or ...??!!
Gl.
Undecided

I'd eat my hat if my forums got hacked with this. The limit input is actually set with intval, not m_r_e_s. Anyway, simple enough to put a check for less than 0?

else if($thread_limit < 0)
{
	$thread_limit = 20;
}