diff options
author | lpsolit%gmail.com <> | 2006-10-15 07:02:09 +0200 |
---|---|---|
committer | lpsolit%gmail.com <> | 2006-10-15 07:02:09 +0200 |
commit | 93815fc7619567cc962e053280c5ed0b19492feb (patch) | |
tree | ffc99d8156c41fbd0d5ab8801324adead2ef4436 /attachment.cgi | |
parent | 6fcfcb93eda16108f71b4c96010bae95cde622cd (diff) | |
download | bugzilla-93815fc7619567cc962e053280c5ed0b19492feb.tar.gz bugzilla-93815fc7619567cc962e053280c5ed0b19492feb.tar.xz |
Bug 281181: [SECURITY] It's way too easy to delete versions/components/milestones etc... - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=myk
Diffstat (limited to 'attachment.cgi')
-rwxr-xr-x | attachment.cgi | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/attachment.cgi b/attachment.cgi index 431db444e..2b35b5e2c 100755 --- a/attachment.cgi +++ b/attachment.cgi @@ -825,7 +825,7 @@ sub delete_attachment { } # Now delete the token. - Bugzilla::Token::DeleteToken($token); + delete_token($token); # Paste the reason provided by the admin into a comment. AppendComment($bug_id, $user->id, $msg); @@ -835,7 +835,7 @@ sub delete_attachment { } else { # Create a token. - $token = Bugzilla::Token::IssueSessionToken('attachment' . $attach_id); + $token = issue_session_token('attachment' . $attach_id); $vars->{'a'} = $attachment; $vars->{'token'} = $token; |