diff --git a/api/index.php b/api/index.php index 737ce8ab..633b11a7 100644 --- a/api/index.php +++ b/api/index.php @@ -207,7 +207,7 @@ break; case "updateArticle": - $article_ids = split(",", db_escape_string($_REQUEST["article_ids"])); + $article_ids = array_filter(explode(",", db_escape_string($_REQUEST["article_ids"])), is_numeric); $mode = (int) db_escape_string($_REQUEST["mode"]); $field_raw = (int)db_escape_string($_REQUEST["field"]);