fix reflected XSS

yllen · Nov 7, 2022 · 08be831 · 08be831
1 parent 1b35149
commit 08be831
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/inc/autoreport.class.php b/inc/autoreport.class.php
@@ -242,7 +242,7 @@ function execute($options=[]) {
       $res   = $DB->query($this->sql);
       $nbtot = ($res ? $DB->numrows($res): 0);
       if ($limit) {
-         $start = (isset ($_GET["start"]) ? $_GET["start"] : 0);
+         $start = (isset ($_GET["start"]) ? intval($_GET["start"]) : 0);
          if ($start >= $nbtot) {
             $start = 0;
          }