From 5ce534eb7cdb2d3f8a5b66d22e4e12dfe1d1d319 Mon Sep 17 00:00:00 2001
From: Andrew Davis <andrew@affinitysoftware.net>
Date: Mon, 4 Oct 2010 08:12:28 +0000
Subject: [PATCH] rss MDLSITE-1007 fixed a potential security problem with blog
 rss feeds

---
 blog/rsslib.php | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/blog/rsslib.php b/blog/rsslib.php
index 7f74a69f7c7..70a723a9e0b 100755
--- a/blog/rsslib.php
+++ b/blog/rsslib.php
@@ -114,12 +114,12 @@ function blog_rss_get_feed($context, $args) {
         return null;
     }
 
-    $type = $args[3];
-    $id = (int) $args[4];  // could be groupid / courseid  / userid  depending on $type
+    $type  = clean_param($args[3], PARAM_ALPHA);
+    $id = clean_param($args[4], PARAM_INT);  // could be groupid / courseid  / userid  depending on $type
 
     $tagid=0;
     if ($args[5] != 'rss.xml') {
-        $tagid = (int) $args[5];
+        $tagid = clean_param($args[5], PARAM_INT);
     } else {
         $tagid = 0;
     }