(int) $this->data ...

Also, language would need escaping (but only the id match is needed)
On Dec 1, 2013 9:16 PM, "Matt Friedman" <notifications@github.com> wrote:

> In entity/rule.php:
>
> > +		$rule_data = array(
> > +			'rule_language'					=> $this->data['rule_language'],
> > +			'rule_left_id'					=> $left_id,
> > +			'rule_right_id'					=> $right_id,
> > +			'rule_anchor'					=> $this->data['rule_anchor'],
> > +			'rule_title'					=> $this->data['rule_title'],
> > +			'rule_message'					=> $this->data['rule_message'],
> > +			'rule_message_bbcode_uid'		=> $this->data['rule_message_bbcode_uid'],
> > +			'rule_message_bbcode_bitfield'	=> $this->data['rule_message_bbcode_bitfield'],
> > +			'rule_message_bbcode_options'	=> $this->data['rule_message_bbcode_options'],
> > +		);
> > +
> > +		$sql = 'UPDATE ' . $this->board_rules_table . '
> > +			SET ' . $this->db->sql_build_array('UPDATE', $rule_data) . "
> > +			WHERE rule_language = " . $language . "
> > +			 AND rule_id = " . $this->data['rule_id'];
>
> (int) ?
>
> —
> Reply to this email directly or view it on GitHub<https://github.com/phpbb-extensions/boardrules/pull/12/files#r8016887>
> .
>