Additional patch to fix #14016

First patch to fix the issue introduced access to undefined variable.
mantisbt · Jun 3, 2012 · 75568c5 · 75568c5
1 parent 31d1156
commit 75568c5
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/api/soap/mc_issue_attachment_api.php b/api/soap/mc_issue_attachment_api.php
@@ -72,7 +72,7 @@ function mc_issue_attachment_delete( $p_username, $p_password, $p_issue_attachme
 	$t_bug_id = file_get_field( $p_issue_attachment_id, 'bug_id' );
 
 	# Perform access control checks
-	$t_attachment_owner = file_get_field( $f_file_id, 'user_id' );
+	$t_attachment_owner = file_get_field( $p_issue_attachment_id, 'user_id' );
 	$t_current_user_is_attachment_owner = $t_attachment_owner == $t_user_id;
 	# Factor in allow_delete_own_attachments=ON|OFF
 	if ( !$t_current_user_is_attachment_owner || ( $t_current_user_is_attachment_owner && !config_get( 'allow_delete_own_attachments' ) ) ) {