The line in question is
Code: [Select]
$query_parameters['max_id_msg'] = max(0, $modSettings['maxMsgID'] - 100 - $_REQUEST['start'] * 6);
The problem is immediately apparent: an unsanitized string is used in integer arithmetic (subtraction)
This isn't...
from Simple Machines Community Forum https://ift.tt/2DfMaWz
via IFTTT
No comments:
Post a Comment