sanitize submitted numerical values; merged from MOODLE_16_STABLE

diff --git a/mod/glossary/lib.php b/mod/glossary/lib.php
index bf462c35bcdeb23c7a90395b784ed4ab915cb1cf..35ee04efa34f666888f7413702f162f96216dc5d 100644 (file)
--- a/mod/glossary/lib.php
+++ b/mod/glossary/lib.php
@@ -81,6 +81,9 @@ function glossary_add_instance($glossary) {
         error("This format doesn't exist!");
     }  
 
+    //sanitize submitted values a bit
+    $glossary->entbypage = clean_param($glossary->entbypage, PARAM_INT);
+
     return insert_record("glossary", $glossary);
 }