From 1355d45bdaf91cb4aa506166eb619c2729997bd6 Mon Sep 17 00:00:00 2001
From: "mkanat%kerio.com" <>
Date: Sun, 27 Feb 2005 09:08:12 +0000
Subject: Bug 283562: Insecure dependency in parameter 3 of DBI::db
 (login_to_id forgets a trick_taint) Patch By Max Kanat-Alexander
 <mkanat@kerio.com> r=wurblzap, r=joel, a=justdave

---
 Bugzilla/User.pm | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

(limited to 'Bugzilla/User.pm')

diff --git a/Bugzilla/User.pm b/Bugzilla/User.pm
index 4d4787525..f87f021b9 100644
--- a/Bugzilla/User.pm
+++ b/Bugzilla/User.pm
@@ -1013,10 +1013,11 @@ sub is_available_username ($;$) {
 sub login_to_id ($) {
     my ($login) = (@_);
     my $dbh = Bugzilla->dbh;
+    # $login will only be used by the following SELECT statement, so it's safe.
+    trick_taint($login);
     my $user_id = $dbh->selectrow_array(
         "SELECT userid FROM profiles WHERE login_name = ?", undef, $login);
-    # $user_id should be a positive integer, this makes Taint mode happy
-    if (defined $user_id && detaint_natural($user_id)) {
+    if ($user_id) {
         return $user_id;
     } else {
         return 0;
-- 
cgit v1.2.3-24-g4f1b