Bug 313679: Changing email address in sudo mode logs user in as
impersonated user - Patch by A. Karl Kornel <karl@kornel.name> r=wurblzap a=justdave git-svn-id: svn://10.0.0.236/trunk@186009 18797224-902f-48f8-a5cc-f745e15eee43
This commit is contained in:
@@ -420,9 +420,11 @@ sub SaveSavedSearches {
|
||||
my $cgi = Bugzilla->cgi;
|
||||
|
||||
# This script needs direct access to the username and password CGI variables,
|
||||
# so we save them before their removal in Bugzilla->login
|
||||
# so we save them before their removal in Bugzilla->login, and delete them
|
||||
# prior to login if we might possibly be in an sudo session.
|
||||
my $bugzilla_login = $cgi->param('Bugzilla_login');
|
||||
my $bugzilla_password = $cgi->param('Bugzilla_password');
|
||||
$cgi->delete('Bugzilla_login', 'Bugzilla_password') if ($cgi->cookie('sudo'));
|
||||
|
||||
Bugzilla->login(LOGIN_REQUIRED);
|
||||
$cgi->param('Bugzilla_login', $bugzilla_login);
|
||||
|
||||
Reference in New Issue
Block a user