Add CSRF protection for bug_assign_reporter

mantisbt · Jul 6, 2009 · 88b4537 · 88b4537
1 parent 2e3c614
commit 88b4537
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/bug_assign_reporter.php b/bug_assign_reporter.php
@@ -29,7 +29,7 @@
 
 	require_once( 'bug_api.php' );
 
-	# helper_ensure_post();
+	form_security_validate( 'bug_assign_reporter' );
 
 	$f_bug_id = gpc_get_int( 'bug_id' );
 
@@ -44,4 +44,6 @@
 
 	bug_assign( $f_bug_id, bug_get_field( $f_bug_id, 'reporter_id') );
 
+	form_security_purge( 'bug_assign_reporter' );
+
 	print_successful_redirect_to_bug( $f_bug_id );