Bug 304044: Missing scalar() for some parameters - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=justdave
git-svn-id: svn://10.0.0.236/trunk@177696 18797224-902f-48f8-a5cc-f745e15eee43
This commit is contained in:
@@ -76,12 +76,11 @@ sub SaveAccount {
|
||||
if ($cgi->param('Bugzilla_password') ne "" ||
|
||||
$pwd1 ne "" || $pwd2 ne "")
|
||||
{
|
||||
my $old = SqlQuote($cgi->param('Bugzilla_password'));
|
||||
SendSQL("SELECT cryptpassword FROM profiles WHERE userid = $userid");
|
||||
my $oldcryptedpwd = FetchOneColumn();
|
||||
$oldcryptedpwd || ThrowCodeError("unable_to_retrieve_password");
|
||||
|
||||
if (crypt($cgi->param('Bugzilla_password'), $oldcryptedpwd) ne
|
||||
if (crypt(scalar($cgi->param('Bugzilla_password')), $oldcryptedpwd) ne
|
||||
$oldcryptedpwd)
|
||||
{
|
||||
ThrowUserError("old_password_incorrect");
|
||||
|
||||
Reference in New Issue
Block a user