Fix for bug 108516: It was possible to file a bug as someone you're not. User identi...

giving user ID are now ignored.
r= jake, bbaetz

diff --git a/post_bug.cgi b/post_bug.cgi
index bcbef7bb3f5025e86d9b97bd48129da15f79b786..dcb3f245fb097dcbbe2129f9ed42cbf3f0653d42 100755 (executable)
--- a/post_bug.cgi
+++ b/post_bug.cgi
@@ -48,9 +48,8 @@ sub sillyness {
 
 confirm_login();
 
-my $cookiepath = Param("cookiepath");
-print "Set-Cookie: PLATFORM=$::FORM{'product'} ; path=$cookiepath ; expires=Sun, 30-Jun-2029 00:00:00 GMT\n" if ( exists $::FORM{'product'} );
-print "Set-Cookie: VERSION-$::FORM{'product'}=$::FORM{'version'} ; path=$cookiepath ; expires=Sun, 30-Jun-2029 00:00:00 GMT\n" if ( exists $::FORM{'product'} && exists $::FORM{'version'} );
+print "Set-Cookie: PLATFORM=$::FORM{'product'} ; path=/ ; expires=Sun, 30-Jun-2029 00:00:00 GMT\n" if ( exists $::FORM{'product'} );
+print "Set-Cookie: VERSION-$::FORM{'product'}=$::FORM{'version'} ; path=/ ; expires=Sun, 30-Jun-2029 00:00:00 GMT\n" if ( exists $::FORM{'product'} && exists $::FORM{'version'} );
 
 print "Content-type: text/html\n\n";