From fe2804735ff10245cefb507bd5c92e360ddc4829 Mon Sep 17 00:00:00 2001
From: tianya <yanghuxiao@vip.qq.com>
Date: Mon, 30 Dec 2024 22:26:40 +0800
Subject: [PATCH] =?UTF-8?q?CNVD-C-2024-806591=E9=97=AE=E9=A2=98=E4=BF=AE?=
 =?UTF-8?q?=E5=A4=8D?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 src/admin/makehtml_freelist_action.php | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/src/admin/makehtml_freelist_action.php b/src/admin/makehtml_freelist_action.php
index a1474805..32d95046 100644
--- a/src/admin/makehtml_freelist_action.php
+++ b/src/admin/makehtml_freelist_action.php
@@ -11,9 +11,10 @@
 require_once(dirname(__FILE__)."/config.php");
 CheckPurview('sys_MakeHtml');
 require_once(DEDEINC."/archive/freelist.class.php");
-if (empty($startid)) $startid = 0;
+$startid = empty($startid)? 0 : intval($startid);
+$endid = empty($endid)? 0 : intval($endid);
 $ci = " aid >= $startid ";
-if (!empty($endid) && $endid >= $startid) {
+if ($endid > 0 && $endid >= $startid) {
     $ci .= " And aid <= $endid ";
 }
 header("Content-Type:text/html; charset={$cfg_soft_lang}");