From ea5068146e8bd6a6bfd1df60d3780cdc05d71d1d Mon Sep 17 00:00:00 2001
From: Jared Hancock <jared@osticket.com>
Date: Wed, 26 Feb 2014 22:33:59 -0600
Subject: [PATCH] mysqli: Numbers with leading zeros are strings
---
include/mysqli.php | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/include/mysqli.php b/include/mysqli.php
index d8ce115cc..86b5a3b7f 100644
--- a/include/mysqli.php
+++ b/include/mysqli.php
@@ -239,7 +239,7 @@ function db_input($var, $quote=true) {
if(is_array($var))
return array_map('db_input', $var, array_fill(0, count($var), $quote));
- elseif($var && preg_match("/^\d+(\.\d+)?$/", $var))
+ elseif($var && preg_match("/^(?:\d+\.\d+|[1-9]\d*)$/S", $var))
return $var;
return db_real_escape($var, $quote);
--
GitLab