more types

2020-01-26 19:44:36 +00:00
parent f8499be286
commit cddf6e9d5f
9 changed files with 12 additions and 11 deletions
--- a/ext/image/main.php
+++ b/ext/image/main.php
@ -46,7 +46,7 @@ class ImageIO extends Extension
        if ($event->page_matches("image/delete")) {
            global $page, $user;
            if ($user->can(Permissions::DELETE_IMAGE) && isset($_POST['image_id']) && $user->check_auth_token()) {
-                $image = Image::by_id($_POST['image_id']);
+                $image = Image::by_id(int_escape($_POST['image_id']));
                if ($image) {
                    send_event(new ImageDeletionEvent($image));
                    $page->set_mode(PageMode::REDIRECT);