<?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE extension SYSTEM "ext-1.0.dtd">

<extension engine="1.0">
	<id>hotfix_131_sql_injection_in_admin_settings</id>
	<title>PunBB 1.3.1 hotfix for a potential SQL-injections in admin/settings.php for permissions config values.</title>
	<version>1.0</version>
	<description>Fixed a potential SQL-injections in admin/settings.php for permissions config values.</description>
	<author>PunBB Development Team</author>
	<minversion>1.3.1</minversion>
	<maxtestedon>1.3.1</maxtestedon>

	<hooks>
		<hook id="aop_qr_update_permission_conf" priority = "1"><![CDATA[
$query['SET'] = 'conf_value='.intval($input);
		]]></hook>
	</hooks>
</extension>
