Sanitise int on the offset.

git-svn-id: http://code.elgg.org/elgg/trunk@5634 36083f99-b078-4883-b0ff-0f9b5a30f544

diff --git a/engine/lib/elgglib.php b/engine/lib/elgglib.php
index 8f383904dd3642dcc20ed70e372c5d2ee988159e..b9c4b09982aa15f7407cbb7f324e8857fe8ee389 100644 (file)
--- a/engine/lib/elgglib.php
+++ b/engine/lib/elgglib.php
@@ -747,7 +747,7 @@ function elgg_view_entity_list($entities, $count, $offset, $limit, $fullview = t
        
        // do not require views to explicitly pass in the offset
        if (!$offset = (int) $offset) {
-               $offset = get_input('offset', 0);
+               $offset = sanitise_int(get_input('offset', 0));
        }
 
        $context = get_context();
@@ -3003,4 +3003,4 @@ register_elgg_event_handler('init', 'system', 'elgg_init');
 register_elgg_event_handler('boot', 'system', 'elgg_boot', 1000);
 register_plugin_hook('unit_test', 'system', 'elgg_api_test');
 
-register_elgg_event_handler('init', 'system', 'add_custom_menu_items', 1000);
\ No newline at end of file
+register_elgg_event_handler('init', 'system', 'add_custom_menu_items', 1000);