Patch for bug 250259: Fix taint error on disallownew field in editproducts.cgi; patch by GavinS <bugzilla@chimpychompy.org>; r=vladd, a=justdave.

1 files changed, 1 insertions, 1 deletions

diff --git a/editproducts.cgi b/editproducts.cgi
index 6d33c8080..b0e6279e0 100755
--- a/editproducts.cgi
+++ b/editproducts.cgi
@@ -1092,7 +1092,7 @@ if ($action eq 'update') {
                          milestones READ");
 
     if ($disallownew ne $disallownewold) {
-        $disallownew ||= 0;
+        $disallownew = $disallownew ? 1 : 0;
         SendSQL("UPDATE products
                  SET disallownew=$disallownew
                  WHERE id=$product_id");