summaryrefslogtreecommitdiffstats
path: root/showattachment.cgi
diff options
context:
space:
mode:
authorterry%mozilla.org <>2000-03-08 03:22:41 +0100
committerterry%mozilla.org <>2000-03-08 03:22:41 +0100
commitd38fe0e5cab4a7efaba8a79a22a85b0e67817441 (patch)
treed090c36e14e128eb6c65e3b4d5d576ba78647650 /showattachment.cgi
parent77f66018f328fe5321fa95d76515a187231ad1f0 (diff)
downloadbugzilla-d38fe0e5cab4a7efaba8a79a22a85b0e67817441.tar.gz
bugzilla-d38fe0e5cab4a7efaba8a79a22a85b0e67817441.tar.xz
Patch by Brian Duggan <bduggan@oven.com> -- security improvements.
Diffstat (limited to 'showattachment.cgi')
-rwxr-xr-xshowattachment.cgi2
1 files changed, 1 insertions, 1 deletions
diff --git a/showattachment.cgi b/showattachment.cgi
index d5dcfb8df..4a1864b3b 100755
--- a/showattachment.cgi
+++ b/showattachment.cgi
@@ -29,7 +29,7 @@ ConnectToDatabase();
my @row;
if (defined $::FORM{'attach_id'}) {
- SendSQL("select mimetype, thedata from attachments where attach_id = $::FORM{'attach_id'}");
+ SendSQL("select mimetype, thedata from attachments where attach_id =".SqlQuote($::FORM{'attach_id'});
@row = FetchSQLData();
}
if (!@row) {