Security issue: intval function added

main/calendar/agenda.inc.php

@@ -1652,7 +1652,6 @@ function save_edit_agenda_item($id,$title,$content,$start_date,$end_date)
 	$TABLEAGENDA= Database::get_course_table(TABLE_AGENDA);
 	$id			= Database::escape_string($id);
 	$title		= Database::escape_string(Security::remove_XSS($title));	
-	$content=stripslashes($content);
 	$content 	= Database::escape_string(Security::remove_XSS($content,COURSEMANAGERLOWSECURITY));
 	$start_date	= Database::escape_string($start_date);
 	$end_date	= Database::escape_string($end_date);
@@ -1664,7 +1663,7 @@ function save_edit_agenda_item($id,$title,$content,$start_date,$end_date)
 				start_date	='".$start_date."',
 				end_date	='".$end_date."'
 			WHERE id='".$id."'";
-	$result = Database::query($sql) or die (Database::error());
+	$result = Database::query($sql);
 	return true;
 }
 
@@ -1687,7 +1686,7 @@ function delete_agenda_item($id)
 		{
 		    $t_agenda     = Database::get_course_table(TABLE_AGENDA);
             $t_agenda_r   = Database::get_course_table(TABLE_AGENDA_REPEAT);
-            $id=(int)addslashes($_GET['id']);
+            $id=intval($_GET['id']);
             $sql = "SELECT * FROM $t_agenda_r WHERE cal_id = $id";
             $res = Database::query($sql);
             if(Database::num_rows($res)>0)