From 619c67f5fa574f032f32f3ec110bca5768484f0a Mon Sep 17 00:00:00 2001
From: Fahad Abbas <adventivepk@gmail.com>
Date: Sat, 18 Aug 2018 13:26:04 +0500
Subject: [PATCH] modified : request should expect integers to proceed

---
 upload/ajax/commonAjax.php | 2 +-
 upload/watch_video.php     | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/upload/ajax/commonAjax.php b/upload/ajax/commonAjax.php
index e57a5399..ae8d7296 100755
--- a/upload/ajax/commonAjax.php
+++ b/upload/ajax/commonAjax.php
@@ -33,7 +33,7 @@
 			case 'get_video':{
 				$response = array();
 				try{
-					$videoid = $_POST['videoid'];
+					$videoid = (int)$_POST['videoid'];
 				    $videoDetails = $cbvid->get_video($videoid);
 				    if ( $videoDetails && video_playable($videoDetails) ){
 				    	assign('video',$videoDetails);
diff --git a/upload/watch_video.php b/upload/watch_video.php
index 8fffc671..dfc4d007 100644
--- a/upload/watch_video.php
+++ b/upload/watch_video.php
@@ -23,7 +23,7 @@
 	$assign_arry['vdo'] = $vdo;
 	if(video_playable($vdo)) {	
 		//Checking for playlist
-		$pid = $_GET['play_list'];
+		$pid = (int)$_GET['play_list'];
 		if(!empty($pid)) {
 			$plist = get_playlist( $pid );
 			if ( $plist ) {