diff options
author | Yorhel <git@yorhel.nl> | 2010-12-28 09:33:32 +0100 |
---|---|---|
committer | Yorhel <git@yorhel.nl> | 2010-12-28 09:33:32 +0100 |
commit | 26854037e8e4d77653adf2619f1cc2da1b5b736d (patch) | |
tree | 89c53c9a71c1a695ecad1a20ca3cae648ebfea2e | |
parent | fd56a6e269aea462a80fff730eccabd4688036e3 (diff) |
Bugfix: check for validness of form arguments on /[uv]+/votes
-rw-r--r-- | ChangeLog | 1 | ||||
-rw-r--r-- | lib/VNDB/Handler/ULists.pm | 1 |
2 files changed, 2 insertions, 0 deletions
@@ -19,6 +19,7 @@ - Added users_prefs table and removed the following columns from users: skin, customcss, show_nsfw, show_list, notify_announce, notify_dbedit - Store l10n preference in the database for logged-in users + - Bugfix: check for validness of form arguments on /[uv]+/votes 2.15 - 2010-12-15 - Removed expand/collapse from history browser and /u+/posts and switched to diff --git a/lib/VNDB/Handler/ULists.pm b/lib/VNDB/Handler/ULists.pm index cb164277..870f634a 100644 --- a/lib/VNDB/Handler/ULists.pm +++ b/lib/VNDB/Handler/ULists.pm @@ -127,6 +127,7 @@ sub votelist { { name => 's', required => 0, default => 'date', enum => [qw|date title vote|] }, { name => 'c', required => 0, default => 'all', enum => [ 'all', 'a'..'z', 0 ] }, ); + return 404 if $f->{_err}; if($own && $self->reqMethod eq 'POST') { return if !$self->authCheckCode; |