Sanitize $nodeSourceID in browse

NESCent / FossilCalibrations

Fossil calibrations database

http://fossilcalibrations.org

BSD 2-Clause "Simplified" License

14 stars 4 forks source link

Sanitize $nodeSourceID in browse #61

Closed dleehr closed 9 years ago

dleehr commented 9 years ago

While they were escaped and it doesn’t appear SQL injection is possible through this vector, the behavior was still odd.

This change validates the input and ignores if it is invalid.

Fixes #33

jimallman commented 9 years ago

OK, this is now running on the dev site. This seems like sensible behavior -- if the specified node source or ID is bogus, we bounce to the NCBI root node by default.