com web/bugs: - Check the user supplied password here too: www/bug.php
| From: | Felipe Pena | Date: | Fri, 25 May 2012 12:11:28 +0000 |
| Subject: | com web/bugs: - Check the user supplied password here too: www/bug.php | ||
| Groups: | php.webmaster | ||
| Request: | Send a blank email to php-webmaster+get-13599@lists.php.net to get a copy of this message | ||
Commit: bc186817cf176d4c95489655126bd8fb3c6f9dd4
Author: Felipe Pena <felipensp@gmail.com> Fri, 25 May 2012 09:11:28 -0300
Parents: 96b01d119e7b5d2d0a51c50f8c6e8ff377b915d9
Branches: master
Link: http://git.php.net/?p=web/bugs.git;a=commitdiff;h=bc186817cf176d4c95489655126bd8fb3c6f9dd4
Log:
- Check the user supplied password here too
Changed paths:
M www/bug.php
Diff:
diff --git a/www/bug.php b/www/bug.php
index 6b3d1f5..71c928f 100644
--- a/www/bug.php
+++ b/www/bug.php
@@ -251,7 +251,7 @@ if (isset($_POST['ncomment']) &&
!isset($_POST['preview']) && $edit == 3) {
} elseif (isset($_POST['in']) && !isset($_POST['preview']) &&
$edit == 2) {
// Edits submitted by original reporter for old bugs
- if (!$show_bug_info) {
+ if (!$show_bug_info || !verify_bug_passwd($bug_id, bugs_get_hash($pw))) {
$errors[] = 'The password you supplied was incorrect.';
}