summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorYorhel <git@yorhel.nl>2010-12-28 09:33:32 +0100
committerYorhel <git@yorhel.nl>2010-12-28 09:33:32 +0100
commit26854037e8e4d77653adf2619f1cc2da1b5b736d (patch)
tree89c53c9a71c1a695ecad1a20ca3cae648ebfea2e
parentfd56a6e269aea462a80fff730eccabd4688036e3 (diff)
Bugfix: check for validness of form arguments on /[uv]+/votes
-rw-r--r--ChangeLog1
-rw-r--r--lib/VNDB/Handler/ULists.pm1
2 files changed, 2 insertions, 0 deletions
diff --git a/ChangeLog b/ChangeLog
index 906346f1..fee3638e 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -19,6 +19,7 @@
- Added users_prefs table and removed the following columns from users:
skin, customcss, show_nsfw, show_list, notify_announce, notify_dbedit
- Store l10n preference in the database for logged-in users
+ - Bugfix: check for validness of form arguments on /[uv]+/votes
2.15 - 2010-12-15
- Removed expand/collapse from history browser and /u+/posts and switched to
diff --git a/lib/VNDB/Handler/ULists.pm b/lib/VNDB/Handler/ULists.pm
index cb164277..870f634a 100644
--- a/lib/VNDB/Handler/ULists.pm
+++ b/lib/VNDB/Handler/ULists.pm
@@ -127,6 +127,7 @@ sub votelist {
{ name => 's', required => 0, default => 'date', enum => [qw|date title vote|] },
{ name => 'c', required => 0, default => 'all', enum => [ 'all', 'a'..'z', 0 ] },
);
+ return 404 if $f->{_err};
if($own && $self->reqMethod eq 'POST') {
return if !$self->authCheckCode;