From: lpsolit%gmail.com <>
Date: Tue, 21 Feb 2006 07:40:56 +0000 (+0000)
Subject: [SECURITY] Bug 312498: editparams.cgi doesn't check whether 'whinedays' and 'mostfreq... 
X-Git-Tag: bugzilla-2.18.5~1
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=baa5111f805cc51288e9dd82a89cbeb39425ec3a;p=thirdparty%2Fbugzilla.git

[SECURITY] Bug 312498: editparams.cgi doesn't check whether 'whinedays' and 'mostfreqthreshold' are numeric - Patch by Frédéric Buclin <LpSolit@gmail.com> r=wicked a=justdave
---

diff --git a/defparams.pl b/defparams.pl
index 5f709c43ee..f8e1776a7b 100644
--- a/defparams.pl
+++ b/defparams.pl
@@ -480,7 +480,8 @@ sub find_languages {
            'If you have a large database and this page takes a long time to ' .
            'load, try increasing this number.',
    type => 't',
-   default => '2'
+   default => '2',
+   checker => \&check_numeric
   },
 
   {
@@ -574,7 +575,8 @@ Configure bugmail: %urlbase%userprefs.cgi?tab=email
              state before our cronjob will whine at the owner.<br>
              Set to 0 to disable whining.},
    type => 't',
-   default => 7
+   default => 7,
+   checker => \&check_numeric
   },
 
   {