fix(sec): Fix SQL Injection in Virtual Metrics

* Fix SQL Injection in Virtual Metrics in get information

www/include/views/graphs/common/makeXML_ListMetrics.php

@@ -89,11 +89,17 @@ if (isset($_SESSION['centreon'])) {
     $where = "";
     $def_type = array(0=>"CDEF",1=>"VDEF");
 
-if (isset($_GET["vdef"]) && $_GET["vdef"] == 0) {
+if (isset($_GET['vdef']) && is_numeric($_GET['vdef']) && $_GET['vdef'] == 0) {
     $where = " AND def_type='".$_GET["vdef"]."'";
 }
 
 if (isset($_GET["host_id"]) && $_GET["service_id"]) {
+    if (!is_numeric($_GET['host_id']) || !is_numeric($_GET['service_id'])) {
+        $buffer = new CentreonXML();
+        $buffer->writeElement('error', 'Bad id format');
+        $buffer->output();
+        exit;
+    }
     $host_id = $_GET["host_id"];
     $service_id = $_GET["service_id"];