equal
deleted
inserted
replaced
2832 |
2832 |
2833 } |
2833 } |
2834 |
2834 |
2835 if(isset($_GET['action']) && isset($_GET['id'])) |
2835 if(isset($_GET['action']) && isset($_GET['id'])) |
2836 { |
2836 { |
2837 if(preg_match('#^([0-9]*)$#', $_GET['id'])) |
2837 if(!preg_match('#^([0-9]*)$#', $_GET['id'])) |
2838 { |
2838 { |
2839 } else { |
|
2840 echo '<div class="warning-box">Error with action: $_GET["id"] was not an integer, aborting to prevent SQL injection</div>'; |
2839 echo '<div class="warning-box">Error with action: $_GET["id"] was not an integer, aborting to prevent SQL injection</div>'; |
2841 } |
2840 } |
2842 switch($_GET['action']) |
2841 switch($_GET['action']) |
2843 { |
2842 { |
2844 case 'new': |
2843 case 'new': |