From 406508ea8a600b9ed3582b6771cab62de81b9dc5 Mon Sep 17 00:00:00 2001 From: "jake%acutex.net" <> Date: Sun, 26 Aug 2001 01:53:31 +0000 Subject: Fix for bug 87769 - doeditvotes.cgi can nuke votes Patch by Christopher Aillon r= jake@acutex.net --- doeditvotes.cgi | 20 ++++++++++++++++++++ 1 file changed, 20 insertions(+) (limited to 'doeditvotes.cgi') diff --git a/doeditvotes.cgi b/doeditvotes.cgi index 155635723..40d6390dd 100755 --- a/doeditvotes.cgi +++ b/doeditvotes.cgi @@ -19,6 +19,7 @@ # Rights Reserved. # # Contributor(s): Terry Weissman +# Christopher Aillon use diagnostics; use strict; @@ -38,6 +39,25 @@ confirm_login(); # IDs and the field values are the number of votes. my @buglist = grep {/^[1-9][0-9]*$/} keys(%::FORM); +# If no bugs are in the buglist, let's make sure the user gets notified +# that their votes will get nuked if they continue. +if ((0 == @buglist) && (! defined $::FORM{'delete_all_votes'})) { + print "Content-type: text/html\n\n"; + PutHeader("Remove your votes?"); + print "

You are about to remove all of your bug votes. Are you sure you wish to remove your vote from every bug you've voted on?

"; + print qq{
\n}; + print qq{

Yes

\n}; + print qq{

No

\n}; + print qq{

Review your votes

\n}; + print qq{

\n}; + PutFooter(); + exit(); +} +elsif ($::FORM{'delete_all_votes'} == 0) { + print "Location: showvotes.cgi\n\n"; + exit(); +} + # Call ValidateBugID on each bug ID to make sure it is a positive # integer representing an existing bug that the user is authorized # to access, and make sure the number of votes submitted is also -- cgit v1.2.3-24-g4f1b