cvs: phpweb / bugs.php
| From: | Jim Winstead | Date: | Sat, 07 Jul 2001 20:58:34 +0000 |
| Subject: | cvs: phpweb / bugs.php | ||
| Groups: | php.mirrors | ||
| Request: | Send a blank email to php-mirrors+get-5309@lists.php.net to get a copy of this message | ||
jimw Sat Jul 7 16:58:34 2001 EDT
Modified files:
/phpweb bugs.php
Log:
don't let just anyone edit bugs without user passwords
Index: phpweb/bugs.php
diff -u phpweb/bugs.php:1.136 phpweb/bugs.php:1.137
--- phpweb/bugs.php:1.136 Sat Jul 7 16:56:00 2001
+++ phpweb/bugs.php Sat Jul 7 16:58:33 2001
@@ -231,7 +231,7 @@
$success = 0;
if ($modify == "user") {
- if ($row[passwd] != $pw) {
+ if (!$row[passwd] || $row[passwd] != $pw) {
echo "<h2 class=\"error\">The password you supplied was
incorrect.</h2>\n";
}
elseif (incoming_details_are_valid()) {