diff options
| author | bbaetz%cs.mcgill.ca <> | 2001-11-12 14:39:14 +0100 |
|---|---|---|
| committer | bbaetz%cs.mcgill.ca <> | 2001-11-12 14:39:14 +0100 |
| commit | c0336202f666c87269eca94bc675db2f6c506b26 (patch) | |
| tree | 099da4cc29ef5a7e896c1117eee321d99196a5e9 /long_list.cgi | |
| parent | a7fd9f01b94922158fb0eb2695f8dcd077ad3bea (diff) | |
| download | bugzilla-c0336202f666c87269eca94bc675db2f6c506b26.tar.gz bugzilla-c0336202f666c87269eca94bc675db2f6c506b26.tar.xz | |
Bug 109690: Check $bug before using it.
r=justdave,gerv
Diffstat (limited to 'long_list.cgi')
| -rwxr-xr-x | long_list.cgi | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/long_list.cgi b/long_list.cgi index 0cde1e93a..63120e5eb 100755 --- a/long_list.cgi +++ b/long_list.cgi @@ -73,6 +73,7 @@ where assign.userid = bugs.assigned_to and report.userid = bugs.reporter and"; $::FORM{'buglist'} = "" unless exists $::FORM{'buglist'}; foreach my $bug (split(/:/, $::FORM{'buglist'})) { + if (!detaint_natural($bug)) || next; SendSQL(SelectVisible("$generic_query bugs.bug_id = $bug", $::userid, $::usergroupset)); |