From 6c00930560b72858c35cba5262f68e3fe067aeaa Mon Sep 17 00:00:00 2001 From: skodak Date: Sat, 26 Sep 2009 11:55:57 +0000 Subject: [PATCH] MDL-20309 improved sanitization of id property --- lib/dmllib.php | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/lib/dmllib.php b/lib/dmllib.php index 8e814cf7d13..b049b23480a 100644 --- a/lib/dmllib.php +++ b/lib/dmllib.php @@ -1627,9 +1627,11 @@ function update_record($table, $dataobject) { global $db, $CFG; - if (! isset($dataobject->id) ) { + // integer value in id propery required + if (empty($dataobject->id)) { return false; } + $dataobject->id = (int)$dataobject->id; /// Check we are handling a proper $dataobject if (is_array($dataobject)) {