Browse Source

sanitize the queries parameter

Kpacha 11 years ago
parent
commit
fd2b03145e
1 changed files with 1 additions and 1 deletions
  1. 1 1
      php-phalcon/app/controllers/BenchController.php

+ 1 - 1
php-phalcon/app/controllers/BenchController.php

@@ -22,7 +22,7 @@ class BenchController extends \Phalcon\Mvc\Controller
     public function dbAction()
     {
 
-        $queries = $this->request->getQuery('queries', null, 1);
+	$queries = min(500, max(1, $this->filter->sanitize($this->request->getQuery('queries', null, 1), "int")));
 
         $worlds = array();