Index: typo3/sysext/cms/tslib/class.tslib_content.php
===================================================================
--- typo3/sysext/cms/tslib/class.tslib_content.php	(revision 6061)
+++ typo3/sysext/cms/tslib/class.tslib_content.php	(working copy)
@@ -7729,7 +7729,8 @@
 		if (!$pid_uid_flag)	{		// If not uid and not pid then uid is set to 0 - which results in nothing!!
 			$query.=' AND '.$table.'.uid=0';
 		}
-		if ($where = trim($conf['where']))	{
+		$where = trim($this->stdWrap($conf['where'], $conf['where.']));	// Be careful not to use GPvar with this feature without saving it (e.g. with stdWrap.intval)
+		if ($where)	{
 			$query.=' AND '.$where;
 		}
 
@@ -7743,7 +7744,7 @@
 			$query.=' AND '.$conf['languageField'].' IN ('.$sys_language_content.')';
 		}
 
-		$andWhere = trim($this->stdWrap($conf['andWhere'],$conf['andWhere.']));
+		$andWhere = trim($this->stdWrap($conf['andWhere'],$conf['andWhere.'])); // Be careful not to use GPvar with this feature without saving it (e.g. with stdWrap.intval)
 		if ($andWhere)	{
 			$query.=' AND '.$andWhere;
 		}