summaryrefslogtreecommitdiffstats
path: root/attachment.cgi
diff options
context:
space:
mode:
authorlpsolit%gmail.com <>2006-10-15 07:02:09 +0200
committerlpsolit%gmail.com <>2006-10-15 07:02:09 +0200
commit93815fc7619567cc962e053280c5ed0b19492feb (patch)
treeffc99d8156c41fbd0d5ab8801324adead2ef4436 /attachment.cgi
parent6fcfcb93eda16108f71b4c96010bae95cde622cd (diff)
downloadbugzilla-93815fc7619567cc962e053280c5ed0b19492feb.tar.gz
bugzilla-93815fc7619567cc962e053280c5ed0b19492feb.tar.xz
Bug 281181: [SECURITY] It's way too easy to delete versions/components/milestones etc... - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=myk
Diffstat (limited to 'attachment.cgi')
-rwxr-xr-xattachment.cgi4
1 files changed, 2 insertions, 2 deletions
diff --git a/attachment.cgi b/attachment.cgi
index 431db444e..2b35b5e2c 100755
--- a/attachment.cgi
+++ b/attachment.cgi
@@ -825,7 +825,7 @@ sub delete_attachment {
}
# Now delete the token.
- Bugzilla::Token::DeleteToken($token);
+ delete_token($token);
# Paste the reason provided by the admin into a comment.
AppendComment($bug_id, $user->id, $msg);
@@ -835,7 +835,7 @@ sub delete_attachment {
}
else {
# Create a token.
- $token = Bugzilla::Token::IssueSessionToken('attachment' . $attach_id);
+ $token = issue_session_token('attachment' . $attach_id);
$vars->{'a'} = $attachment;
$vars->{'token'} = $token;