Bug 283085 : post_bug.cgi can be used to know which products do not exist and which ones are not accessible

Patch by Frederic Buclin <LpSolit@gmail.com>   r=myk   a=myk
This commit is contained in:
travis%sedsystems.ca 2005-02-24 16:30:40 +00:00
parent 3243c8f515
commit 5cbf37aeda

View File

@ -78,12 +78,13 @@ $template->process($format->{'template'}, $vars, \$comment)
ValidateComment($comment);
# Check that the product exists and that the user
# is allowed to submit bugs in this product.
my $product = $::FORM{'product'};
my $product_id = get_product_id($product);
if (!$product_id) {
ThrowUserError("invalid_product_name",
{ product => $product });
if (!CanEnterProduct($product)) {
ThrowUserError("entry_access_denied", {product => $product});
}
my $product_id = get_product_id($product);
# Set cookies
if (exists $::FORM{'product'}) {
@ -106,10 +107,6 @@ if (defined $::FORM{'maketemplate'}) {
umask 0;
# Some sanity checking
if (!CanEnterProduct($product)) {
ThrowUserError("entry_access_denied", {product => $product});
}
my $component_id = get_component_id($product_id, $::FORM{component});
$component_id || ThrowUserError("require_component");