sanitize batchid

webtools/bonsai/CGI.pl

@@ -457,9 +457,10 @@ if (defined $::FORM{'treeid'} && $::FORM{'treeid'} ne "") {
 }
 
 if (defined $::FORM{'batchid'}) {
+    my $bid = &ExpectDigit("batchid", $::FORM{'batchid'});
     LoadBatchID();
-     if ($::BatchID != $::FORM{'batchid'}) {
-          $::BatchID = $::FORM{'batchid'};
+    if ($::BatchID != $bid) {
+        $::BatchID = $bid;
 
         # load parameters first to prevent overwriting
         Param('readonly');