Index: modules/user/user.module
===================================================================
RCS file: /cvs/drupal/drupal/modules/user/user.module,v
retrieving revision 1.793
diff -u -p -r1.793 user.module
--- modules/user/user.module	5 Jun 2007 12:13:23 -0000	1.793
+++ modules/user/user.module	7 Jun 2007 23:55:05 -0000
@@ -88,6 +88,9 @@ function user_load($array = array()) {
   if (is_numeric($array)) {
     $array = array('uid' => $array);
   }
+  elseif (!is_array($array)) {
+    return FALSE;
+  }
 
   foreach ($array as $key => $value) {
     if ($key == 'uid' || $key == 'status') {
Index: modules/node/node.module
===================================================================
RCS file: /cvs/drupal/drupal/modules/node/node.module,v
retrieving revision 1.829
diff -u -p -r1.829 node.module
--- modules/node/node.module	7 Jun 2007 03:45:57 -0000	1.829
+++ modules/node/node.module	7 Jun 2007 23:55:06 -0000
@@ -568,7 +568,7 @@ function node_load($param = array(), $re
     $cond = 'n.nid = %d';
     $arguments[] = $param;
   }
-  else {
+  elseif (is_array($param)) {
     // Turn the conditions into a query.
     foreach ($param as $key => $value) {
       $cond[] = 'n.'. db_escape_string($key) ." = '%s'";
@@ -576,6 +576,9 @@ function node_load($param = array(), $re
     }
     $cond = implode(' AND ', $cond);
   }
+  else {
+    return FALSE;
+  }
 
   // Retrieve the node.
   // No db_rewrite_sql is applied so as to get complete indexing for search.
Index: modules/comment/comment.module
===================================================================
RCS file: /cvs/drupal/drupal/modules/comment/comment.module,v
retrieving revision 1.551
diff -u -p -r1.551 comment.module
--- modules/comment/comment.module	5 Jun 2007 12:13:21 -0000	1.551
+++ modules/comment/comment.module	7 Jun 2007 23:55:06 -0000
@@ -251,12 +251,12 @@ function comment_menu() {
     'access arguments' => array('view', 2),
     'type' => MENU_CALLBACK,
   );
-  $items['node/%node/%'] = array(
+  $items['node/%node/comment/%'] = array(
     'title' => 'View',
     'page callback' => 'node_page_view',
-    'page arguments' => array(1, 2),
+    'page arguments' => array(1, 3),
     'access callback' => '_comment_view_access',
-    'access arguments' => array(1, 2),
+    'access arguments' => array(1, 3),
     'type' => MENU_CALLBACK,
   );
 
@@ -972,7 +972,7 @@ function comment_render($node, $cid = 0)
     $order = _comment_get_display_setting('sort');
     $comments_per_page = _comment_get_display_setting('comments_per_page');
 
-    if ($cid) {
+    if ($cid && is_numeric($cid)) {
       // Single comment view.
       $query = 'SELECT c.cid, c.pid, c.nid, c.subject, c.comment, c.format, c.timestamp, c.name, c.mail, c.homepage, u.uid, u.name AS registered_name, u.signature, u.picture, u.data, c.score, c.users, c.status FROM {comments} c INNER JOIN {users} u ON c.uid = u.uid WHERE c.cid = %d';
       $query_args = array($cid);