diff --git a/admin/albums.php b/admin/albums.php index c5911d660..5022b0bac 100644 --- a/admin/albums.php +++ b/admin/albums.php @@ -49,7 +49,8 @@ if (isset($_POST['simpleAutoOrder']) || isset($_POST['recursiveAutoOrder']) ) { die('Invalid sort order'); } - + check_input_parameter('id', $_POST, false, '/^-?\d+$/'); + $query = ' SELECT id FROM '.CATEGORIES_TABLE.'