diff options
author | mkanat%bugzilla.org <> | 2009-07-07 18:16:51 +0000 |
---|---|---|
committer | mkanat%bugzilla.org <> | 2009-07-07 18:16:51 +0000 |
commit | 89b15c8ff86238276de3428c379e46f7c04b6516 (patch) | |
tree | 43783cd8539a794b58ebe5b86dbfa7e43eaf143c /duplicates.cgi | |
parent | 6a51c4c39e8ced6f808d5517d52c041d9305c2c0 (diff) | |
download | bugs-89b15c8ff86238276de3428c379e46f7c04b6516.tar bugs-89b15c8ff86238276de3428c379e46f7c04b6516.tar.gz bugs-89b15c8ff86238276de3428c379e46f7c04b6516.tar.bz2 bugs-89b15c8ff86238276de3428c379e46f7c04b6516.tar.xz bugs-89b15c8ff86238276de3428c379e46f7c04b6516.zip |
Bug 491467: Make Search.pm and buglist.cgi consistently take column ids for the "fields" and "order" arguments, to prevent problems with using SQL fragments in the order and columnlist.
Patch by Max Kanat-Alexander <mkanat@bugzilla.org> r=wicked, a=mkanat
Diffstat (limited to 'duplicates.cgi')
-rwxr-xr-x | duplicates.cgi | 16 |
1 files changed, 8 insertions, 8 deletions
diff --git a/duplicates.cgi b/duplicates.cgi index 06334e22b..af239d632 100755 --- a/duplicates.cgi +++ b/duplicates.cgi @@ -199,14 +199,14 @@ if (scalar(%count)) { $params->param('product', join(',', @query_products)); } - my $query = new Bugzilla::Search('fields' => [qw(bugs.bug_id - map_components.name - bugs.bug_severity - bugs.op_sys - bugs.target_milestone - bugs.short_desc - bugs.bug_status - bugs.resolution + my $query = new Bugzilla::Search('fields' => [qw(bug_id + component + bug_severity + op_sys + target_milestone + short_desc + bug_status + resolution ) ], 'params' => $params, |