Ensure email ID is an integer

Inspired by PR #28.
This commit is contained in:
Dan Q 2021-08-12 09:19:22 +01:00 committed by GitHub
parent d9a215e315
commit 7543c005b5
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -27,7 +27,7 @@ switch($action)
$o = explode(',',$settings['DOMAINS']);
break;
case 'attachment':
$id = $_REQUEST['id'];
$id = intval($_REQUEST['id']);
$filename = basename(realpath($_REQUEST['filename']));
$filepath = $dir.DS.'attachments'.DS.$id.'-'.$filename;
if(!is_dir($dir))
@ -45,7 +45,7 @@ switch($action)
break;
case 'load':
$id = $_REQUEST['id'];
$id = intval($_REQUEST['id']);
if(empty($email))
$o = array('status'=>'err','reason'=>'No email address provided');
else if(!is_dir($dir))