Prevent SQL injection

git-svn-id: http://chianti.ucsd.edu/svn@31177 0ecc0d97-ab19-0410-9704-bfe1a75892f5
ibphuangchen · May 17, 2013 · 20dbfb9 · 20dbfb9
1 parent 6b484e5
commit 20dbfb9
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/new_cytoscape_website/bugreport/attachedFiledownload.php b/new_cytoscape_website/bugreport/attachedFiledownload.php
@@ -3,7 +3,7 @@
 
 $file_id = null;
 if (isset ($_GET['file_id'])) {
-		$file_id = ($_GET['file_id']);
+		$file_id = mysql_real_escape_string($_GET['file_id']);
 }
 else {
 	exit("File ID unknow!");