Sanitized value before insertion to table.

modules/Calendar/Activity.php

@@ -121,7 +121,7 @@ class Activity extends CRMEntity {
 			$this->deleteRelation("vtiger_seactivityrel");
 		}
 
-        $recordId = $this->id;
+        $recordId = intval($this->id);
 		if(isset($_REQUEST['contactidlist']) && $_REQUEST['contactidlist'] != '') {
 			$adb->pquery( 'DELETE from vtiger_cntactivityrel WHERE activityid = ?', array($recordId));
 
@@ -130,6 +130,7 @@ class Activity extends CRMEntity {
 
 			$sql = 'INSERT INTO vtiger_cntactivityrel VALUES ';
 			for($i=0; $i<$count; $i++) {
+				$contactIdsList[$i] = intval($contactIdsList[$i]);
 				$sql .= " ($contactIdsList[$i], $recordId)";
 				if ($i != $count - 1) {
 					$sql .= ',';