From adcaf7ca4b74ec89c7cb86274c70fa4327f79d1c Mon Sep 17 00:00:00 2001
From: Deven Bansod <devenbansod.bits@gmail.com>
Date: Wed, 21 Sep 2016 21:24:00 +0530
Subject: [PATCH] Use intval to prevent XSS instead, and use numeric to check
 valid datatype

Fix #12382

Signed-off-by: Deven Bansod <devenbansod.bits@gmail.com>
---
 libraries/controllers/table/TableSearchController.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/libraries/controllers/table/TableSearchController.php b/libraries/controllers/table/TableSearchController.php
index ce10917aa8..c2c7462e41 100644
--- a/libraries/controllers/table/TableSearchController.php
+++ b/libraries/controllers/table/TableSearchController.php
@@ -461,7 +461,7 @@ class TableSearchController extends TableController
         }
         $key = array_search($field, $this->_columnNames);
         $search_index = 0;
-        if (PMA_isValid($_REQUEST['it'], 'integer')) {
+        if (PMA_isValid(intval($_REQUEST['it']), 'numeric')) {
             $search_index = $_REQUEST['it'];
         }
         $properties = $this->getColumnProperties($search_index, $key);