From 5b892eafafb1f41bab1a20f1524cef144042e3e1 Mon Sep 17 00:00:00 2001
From: Star Rauchenberger <fefferburbia@gmail.com>
Date: Mon, 8 Jan 2024 20:31:32 +0000
Subject: sql injection prevention

---
 pages/comic.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'pages/comic.php')

diff --git a/pages/comic.php b/pages/comic.php
index 28a420e..620a038 100755
--- a/pages/comic.php
+++ b/pages/comic.php
@@ -1,6 +1,6 @@
 <?php
 
-if (isset($_GET['id']))
+if (isset($_GET['id']) && is_numeric($_GET['id']))
 {
 	$getcomic = "SELECT * FROM comics WHERE comic_id = " . $_GET['id'] . " AND status = \"publish\"";
 } else {
-- 
cgit 1.4.1