diff --git a/system/pages/news.php b/system/pages/news.php index e48e1382..30e00b54 100644 --- a/system/pages/news.php +++ b/system/pages/news.php @@ -29,11 +29,13 @@ if(isset($_GET['archive'])) // display big news by id if(isset($_GET['id'])) { + $id = (int)$_GET['id']; + $field_name = 'date'; - if($_REQUEST['id'] < 100000) + if($id < 100000) $field_name = 'id'; - $news = $db->query('SELECT * FROM `'.TABLE_PREFIX . 'news` WHERE `hidden` != 1 AND `' . $field_name . '` = ' . (int)$_REQUEST['id'] . ''); + $news = $db->query('SELECT * FROM `'.TABLE_PREFIX . 'news` WHERE `hidden` != 1 AND `' . $field_name . '` = ' . $id . ''); if($news->rowCount() == 1) { $news = $news->fetch(); @@ -227,4 +229,4 @@ if(!$news_cached) echo $tmp_content; } else - echo $news_cached; \ No newline at end of file + echo $news_cached;