From: Tim Düsterhus <duesterhus@woltlab.com>
Date: Tue, 17 Nov 2020 10:14:15 +0000 (+0100)
Subject: Force the setupId to be an int in MFAuthenticationForm
X-Git-Tag: 5.4.0_Alpha_1~555^2~49
X-Git-Url: https://git.stricted.de/?a=commitdiff_plain;h=45e553a4015c3b8178fb21df58fbfba6663c6d44;p=GitHub%2FWoltLab%2FWCF.git

Force the setupId to be an int in MFAuthenticationForm
---

diff --git a/wcfsetup/install/files/lib/form/MultifactorAuthenticationForm.class.php b/wcfsetup/install/files/lib/form/MultifactorAuthenticationForm.class.php
index de400ac9bf..d9483ffb72 100644
--- a/wcfsetup/install/files/lib/form/MultifactorAuthenticationForm.class.php
+++ b/wcfsetup/install/files/lib/form/MultifactorAuthenticationForm.class.php
@@ -75,7 +75,7 @@ class MultifactorAuthenticationForm extends AbstractFormBuilderForm {
 		
 		$setupId = \array_keys($this->setups)[0];
 		if (isset($_GET['id'])) {
-			$setupId = $_GET['id'];
+			$setupId = intval($_GET['id']);
 		}
 		
 		if (!isset($this->setups[$setupId])) {