From 7a4004e088c2a1b1388ddc6f1d4b716f81f8235d Mon Sep 17 00:00:00 2001 From: Jakob Date: Wed, 4 Mar 2020 10:24:06 +0100 Subject: [PATCH] =?UTF-8?q?attempted=20fix:=20=C2=A7=5FGET["id"]?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- threadr/boards/thread.php | 9 +-------- 1 file changed, 1 insertion(+), 8 deletions(-) diff --git a/threadr/boards/thread.php b/threadr/boards/thread.php index 650fe6f..4f29df0 100644 --- a/threadr/boards/thread.php +++ b/threadr/boards/thread.php @@ -3,13 +3,6 @@ session_start(); %NO_CHEAP_SESSION_STEALING% %PLEAZE_NO_CACHE% $navbar="boards"; -function _GET($par, $parType = '') { - if($parType == '') { - $parType = gettype($par); - } - $return = filter_input(INPUT_GET, $par, FILTER_SANITIZE_NUMBER_INT); -} -$id = _GET('id'); ?> @@ -29,7 +22,7 @@ $id = _GET('id'); $error = false; $error_message = ""; if (!$error) { - $statement = $pdo->prepare("SELECT * FROM boards WHERE id=$id"); + $statement = $pdo->prepare("SELECT * FROM boards WHERE id=$_GET["id"]"); $statement->execute(); $statement->fetchAll() as $ROW; echo "$ROW[name]";