From 774729b2215b9d417a6736b1dbaa5bf593df760d Mon Sep 17 00:00:00 2001
From: Max Kostikov <max@kostikov.co>
Date: Mon, 17 Sep 2018 13:15:24 +0200
Subject: Update msglib.php

---
 include/msglib.php | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

(limited to 'include')

diff --git a/include/msglib.php b/include/msglib.php
index f196e7bee..f0bf523de 100644
--- a/include/msglib.php
+++ b/include/msglib.php
@@ -6,22 +6,22 @@ function msg_drop($message_id, $channel_id, $conv_guid) {
 
     // Delete message
     $r = q("DELETE FROM mail WHERE id = %d AND channel_id = %d",
-        $message_id,
-        $channel_id
+        intval($message_id),
+        intval($channel_id)
     );
 
     // Get new first message...
     $r = q("SELECT mid, parent_mid FROM mail WHERE conv_guid = '%s' AND channel_id = %d ORDER BY id ASC LIMIT 1",
-        $conv_guid,
-        $channel_id
+        dbesc($conv_guid),
+        intval($channel_id)
     );
     // ...and if wasn't first before...
     if ($r[0]['mid'] != $r[0]['parent_mid']) {
         // ...refer whole thread to it
         q("UPDATE mail SET parent_mid = '%s', mail_isreply = abs(mail_isreply - 1) WHERE conv_guid = '%s' AND channel_id = %d",
             dbesc($r[0]['mid']),
-            $conv_guid,
-            $channel_id
+            dbesc($conv_guid),
+            intval($channel_id)
         );
     }
 
-- 
cgit v1.2.3