Skip to content

Commit 1da5ca9

Browse files
author
airbone42
committed
prevent sql injection
1 parent f2bd9da commit 1da5ca9

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

  • app/code/community/Firegento/AdminLogger/Model

app/code/community/Firegento/AdminLogger/Model/Clean.php

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@ public function clean () {
2222
$adminLoggerCollection = Mage::getModel('firegento_adminlogger/history')
2323
->getCollection()
2424
->addFieldToFilter('created_at', array(
25-
'lt' => new Zend_Db_Expr("DATE_SUB('" . now() . "', INTERVAL $interval DAY)")));
25+
'lt' => new Zend_Db_Expr("DATE_SUB('" . now() . "', INTERVAL " . (int)$interval . " DAY)")));
2626

2727
foreach ($adminLoggerCollection as $history) {
2828
$history->delete();

0 commit comments

Comments
 (0)