Fix category selection

Add a package ID parameter to pkg_change_category() instead of relying
on the "ID" or "N" GET parameters.

Signed-off-by: Lukas Fleischer <archlinux@cryptocrack.de>

1 files changed, 1 insertions, 9 deletions

diff --git a/web/lib/pkgfuncs.inc.php b/web/lib/pkgfuncs.inc.php
index 593ccdea..b42df4c9 100644
--- a/web/lib/pkgfuncs.inc.php
+++ b/web/lib/pkgfuncs.inc.php
@@ -1206,7 +1206,7 @@ function pkg_delete_comment($atype, $dbh=NULL) {
  * @param string $atype Account type, output of account_from_sid
  * @return string Translated error or success message
  */
-function pkg_change_category($atype, $dbh=NULL) {
+function pkg_change_category($pid, $atype, $dbh=NULL) {
 	if (!$atype)  {
 		return __("You must be logged in before you can edit package information.");
 	}
@@ -1226,14 +1226,6 @@ function pkg_change_category($atype, $dbh=NULL) {
 		return __("Invalid category ID.");
 	}
 
-	if (isset($_GET["ID"])) {
-		$pid = $_GET["ID"];
-	} elseif (isset($_GET["N"])) {
-		$pid = pkgid_from_name($_GET["N"]);
-	} else {
-		return __("Missing package ID.");
-	}
-
 	# Verify package ownership
 	$q = "SELECT Packages.MaintainerUID ";
 	$q.= "FROM Packages ";