better param handling SC#331; merged from MOODLE_17_STABLE

diff --git a/mod/forum/user.php b/mod/forum/user.php
index 9ff87c7bdd056e40ed19b6b4167ef0b5dfec84b7..1f6d529b314b801f0a339c782066672ee58540d9 100644 (file)
--- a/mod/forum/user.php
+++ b/mod/forum/user.php
@@ -5,11 +5,11 @@
     require_once('../../config.php');
     require_once('lib.php');
 
-    $course  = required_param('course');     // course id
-    $id      = optional_param('id');       // user id
-    $mode    = optional_param('mode', 'posts');
-    $page    = optional_param('page', 0);
-    $perpage = optional_param('perpage', 5);
+    $course  = required_param('course', PARAM_INT);          // course id
+    $id      = optional_param('id', 0, PARAM_INT);           // user id
+    $mode    = optional_param('mode', 'posts', PARAM_ALPHA);
+    $page    = optional_param('page', 0, PARAM_INT);
+    $perpage = optional_param('perpage', 5, PARAM_INT);
 
     if (empty($id)) {         // See your own profile by default
         require_login();