Index: modules/forum/forum.pages.inc =================================================================== RCS file: /cvs/drupal/drupal/modules/forum/forum.pages.inc,v retrieving revision 1.3 diff -u -p -r1.3 forum.pages.inc --- modules/forum/forum.pages.inc 9 Oct 2009 00:59:59 -0000 1.3 +++ modules/forum/forum.pages.inc 3 Dec 2009 18:05:34 -0000 @@ -10,6 +10,14 @@ * Menu callback; prints a forum listing. */ function forum_page($tid = 0) { + // Ensure $tid is a proper forum term. If $tid isn't a positive integer, 0, or + // isn't a taxonomy term in the forum vocab, return. + $tid = filter_var($tid, FILTER_VALIDATE_INT, array("options" => array('min_range' => 0))); + $term = taxonomy_term_load($tid); + if ($tid === FALSE || !$term || $term->vid != variable_get('forum_nav_vocabulary', '')) { + return MENU_NOT_FOUND; + } + $topics = ''; $forum_per_page = variable_get('forum_per_page', 25); $sortby = variable_get('forum_order', 1);