svn: /web/php-bugs/trunk/www/ bug.php
| From: | Felipe Pena | Date: | Tue, 16 Nov 2010 20:23:44 +0000 |
| Subject: | svn: /web/php-bugs/trunk/www/ bug.php | ||
| Groups: | php.webmaster | ||
| Request: | Send a blank email to php-webmaster+get-9445@lists.php.net to get a copy of this message | ||
felipe Tue, 16 Nov 2010 20:23:44 +0000
Revision: http://svn.php.net/viewvc?view=revision&revision=305414
Log:
- Added link to vuln summary on nist.gov
Changed paths:
U web/php-bugs/trunk/www/bug.php
Modified: web/php-bugs/trunk/www/bug.php
===================================================================
--- web/php-bugs/trunk/www/bug.php 2010-11-16 19:38:31 UTC (rev 305413)
+++ web/php-bugs/trunk/www/bug.php 2010-11-16 20:23:44 UTC (rev 305414)
@@ -378,6 +378,11 @@
$errors[] = "Please do not SPAM our bug system.";
}
+ if (!empty($_POST['in']['cve_id'])) {
+ // Remove the CVE- prefix
+ $_POST['in']['cve_id'] = preg_replace('/^\s*CVE-/i', '',
$_POST['in']['cve_id']);
+ }
+
if ($bug['private'] == 'N' && $bug['private'] !=
$_POST['in']['private']) {
if ($_POST['in']['package_name'] != 'Security related') {
$errors[] = 'Only Security related bugs can be marked as private.';
@@ -659,7 +664,7 @@
<th class="details">Private report:</th>
<td><?php echo $bug['private'] == 'Y' ? 'Yes' :
'No'; ?></td>
<th class="details">CVE-ID:</th>
- <td><?php echo htmlspecialchars($bug['cve_id']); ?></td>
+ <td><?php if (!empty($bug['cve_id'])) { printf('<a href="http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-%s"
target="_blank">%1$s</a>', htmlspecialchars($bug['cve_id'])); }
?></td>
</tr>
</table>
</div>