[SECURITY] Bug 312498: editparams.cgi doesn't check whether 'whinedays' and 'mostfreq...

diff --git a/defparams.pl b/defparams.pl
index 6ccde137edc16c70d6713626dccf6ecc4424e6d8..a66c44c83b7df6f90cae90efc2aa87909813564e 100644 (file)
--- a/defparams.pl
+++ b/defparams.pl
@@ -213,7 +213,8 @@ DefParam("LDAPmailattribute",
 DefParam("mostfreqthreshold",
          "The minimum number of duplicates a bug needs to show up on the <A HREF=\"duplicates.cgi\">most frequently reported bugs page</a>. If you have a large database and this page takes a long time to load, try increasing this number.",
          "t",
-         "2");
+         "2",
+         \&check_numeric);
 
 
 DefParam("mybugstemplate",
@@ -604,7 +605,8 @@ DefParam("maxpatchsize",
           To accept patches of any size (subject to the limitations of 
           your server software), set this value to zero." ,
          "t",
-         '1000');
+         '1000',
+         \&check_numeric);
 
 DefParam("maxattachmentsize" , 
          "The maximum size (in kilobytes) of non-patch attachments.  Bugzilla 
@@ -612,6 +614,7 @@ DefParam("maxattachmentsize" ,
           in size.  To accept attachments of any size (subject to the
           limitations of your server software), set this value to zero." , 
          "t" , 
-         '1000');
+         '1000',
+         \&check_numeric);
 
 1;