Plugin Directory

Changeset 812202


Ignore:
Timestamp:
11/29/2013 03:03:54 AM (12 years ago)
Author:
esserq
Message:

Additional security patching.

Location:
rockhoist-ratings
Files:
7 added
2 edited

Legend:

Unmodified
Added
Removed
  • rockhoist-ratings/trunk/readme.txt

    r794800 r812202  
    44Requires at least: 3.6
    55Tested up to: 3.6.1
    6 Stable tag: 1.2.2
     6Stable tag: 1.2.3
    77
    88Rockhoist Ratings is a thumbs up/ thumbs down style rating widget for posts.
     
    3131
    3232== Changelog ==
     33
     34= 1.2.3 =
     35* Additional security patching.
    3336
    3437= 1.2.2 =
  • rockhoist-ratings/trunk/rh-ratings.php

    r794800 r812202  
    269269    // generate the response
    270270    $response = json_encode( array( 'success'   => true,
    271                     'countup'   => rhb_count_ratings( array( 'post_ID' => $_POST['postID'], 'rating' => 'up') ),
    272                     'countdown' => rhb_count_ratings( array( 'post_ID' => $_POST['postID'], 'rating' => 'down') ) ) );
     271                    'countup'   => rhb_count_ratings( array( 'post_ID' => mysql_real_escape_string(intval($_POST['postID'])), 'rating' => 'up') ),
     272                    'countdown' => rhb_count_ratings( array( 'post_ID' => mysql_real_escape_string(intval($_POST['postID'])), 'rating' => 'down') ) ) );
    273273
    274274    // response output
Note: See TracChangeset for help on using the changeset viewer.