Wordpress /edit-comments.php Database Error (Bug)

[BenjaminFlesch]

In /edit-comments.php, the parameter apage is not properly sanitized before it is used to calculate the rows from which Wordpress tries to pull the comments from.

So in case apage has a negative numerical value, Wordpress throws a Database Error caused by an corrupted SQL Query which can be seen in the picture. It tries to SELECT all data from the table between rows -40 and 25, and this - of course - does not work ;)

[matt]

(In [5836]) Absolute numbers where we will never allow negatives, fixes #4692

[g30rg3x]

For Branch 2.2

[g30rg3x]

Please apply this for branch 2.2 :)

[markjaquith]

(In [5839]) Absolute numbers where we will never allow negatives, fixes #4692 for 2.2.x, thanks g30rg3x

[markjaquith]

(In [5840]) Sanitize cat_id, fixes #4692 for 2.2.x, thanks g30rg3x

[markjaquith]

Doh... That last one was for #4691

[BenjaminFlesch]

thanks for all your patches, guys, when may i expect an updated version?

-benjamin