1 files changed, 2 insertions, 0 deletions
diff --git a/comments.php b/comments.php
index cda791ca6..0ffb05d97 100644
--- a/comments.php
+++ b/comments.php
@@ -104,6 +104,8 @@ $page['where_clauses'] = array();
 // which category to filter on ?
 if (isset($_GET['cat']) and 0 != $_GET['cat'])
 {
+  check_input_parameter('cat', $_GET, false, PATTERN_ID);
+  
   $page['where_clauses'][] =
     'category_id IN ('.implode(',', get_subcat_ids(array($_GET['cat']))).')';
 }