summaryrefslogtreecommitdiffstats
path: root/createattachment.cgi
diff options
context:
space:
mode:
Diffstat (limited to 'createattachment.cgi')
-rwxr-xr-xcreateattachment.cgi1
1 files changed, 1 insertions, 0 deletions
diff --git a/createattachment.cgi b/createattachment.cgi
index 1eaf9b1ea..fa370d710 100755
--- a/createattachment.cgi
+++ b/createattachment.cgi
@@ -41,6 +41,7 @@ confirm_login();
print "Content-type: text/html\n\n";
my $id = $::FORM{'id'};
+die "invalid id: $id" unless $id=~/^\s*\d+\s*$/;
PutHeader("Create an attachment", "Create attachment", "Bug $id");