[bigtime]

Hi,

Here are some other security issues I think should be corrected:


On line 13 of cat.php, change:

PHP Code:

$pages = $_GET[page]; 


To:

PHP Code:

$pages = intval($_GET['page']); 


Same change to playlist.php on line 13, user.php on line 49.

On line 43 of vBTube.php, find this:

PHP Code:

if (!$_GET[page]) { $pages = 1; }
else { $pages = $_GET[page]; }
$pages = intval($_GET['page']); 


Change it to this:

PHP Code:

if (!$_GET[page]) { $pages = 1; }
else { $pages = intval($_GET['page']); } 


Hope I caught them all.


BTW, Playa82, thanks again for the great addon! Don't let anyone's rude comments discourage you!

Tim