fix: a LOT of manual typecastings for DB values that should be INTs

This commit is contained in:
Martin Ambrus
2017-10-18 00:33:03 +02:00
parent 96cd79adc9
commit 057f713528
7 changed files with 495 additions and 493 deletions
+1 -1
View File
@@ -16,7 +16,7 @@ if(isset($_GET['ok'])){
}
if(isset($_GET['newdid'])) {
$_SESSION['wid'] = $_GET['newdid'];
$database->query("UPDATE ".TB_PREFIX."users SET village_select=".$database->escape($_GET['newdid'])." WHERE id=".$session->uid);
$database->query("UPDATE ".TB_PREFIX."users SET village_select=".$database->escape((int) $_GET['newdid'])." WHERE id=".$session->uid);
header("Location: ".$_SERVER['PHP_SELF']);
} else {
$building->procBuild($_GET);