[aur-dev] [PATCH] Do not overwrite package details when adding comments (fixes FS#22075).
Ensure that the "$row" variable isn't overwritten in "web/template/pkg_comment_form.php" during sending mail notifications when adding a comment. --- web/template/pkg_comment_form.php | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/web/template/pkg_comment_form.php b/web/template/pkg_comment_form.php index 70570da..368d49b 100644 --- a/web/template/pkg_comment_form.php +++ b/web/template/pkg_comment_form.php @@ -25,7 +25,7 @@ if (isset($_REQUEST['comment'])) { array_push($bcc, $row['Email']); } - $q = 'SELECT Packages.Name '; + $q = 'SELECT Packages.* '; $q.= 'FROM Packages '; $q.= 'WHERE Packages.ID = ' . intval($_REQUEST['ID']); $result = db_query($q, $dbh); -- 1.7.3.5
On Tue, Jan 11, 2011 at 10:38:24AM +0100, Lukas Fleischer wrote:
Ensure that the "$row" variable isn't overwritten in "web/template/pkg_comment_form.php" during sending mail notifications when adding a comment. --- web/template/pkg_comment_form.php | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-)
Pushed this.
participants (1)
-
Lukas Fleischer