← Back to branch summary

~ubuntu-branches/ubuntu/natty/mahara/natty

« back to all changes in this revision

Viewing changes to htdocs/artefact/blog/index.php

  • Committer: Bazaar Package Importer
  • Author(s): Francois Marier
  • Date: 2011-03-25 16:08:31 UTC
  • mfrom: (6.3.9 sid)
  • Revision ID: james.westby@ubuntu.com-20110325160831-mogklck7j71quyf9
Tags: 1.2.7-1
http://bugs.debian.org/606378
http://bugs.debian.org/597766
* New upstream security release:
  - CVE-2011-0439 (XSS in select boxes)
  - CVE-2011-0440 (CSRF when deleting blogs)

* Add Italian debconf translation (closes: #606378)
* Add Danish debconf translation (closes: #597766)
* Bump debhelper compatibility to 8

Show diffs side-by-side

added added

removed removed

Lines of Context:
htdocs/artefact/blog/index.php
34
34
safe_require('artefact', 'blog');
35
35
 
36
36
if ($delete = param_integer('delete', 0)) {
 
37
    form_validate(param_alphanum('sesskey', null));
37
38
    $blog = artefact_instance_from_id($delete);
38
39
    if ($blog instanceof ArtefactTypeBlog) {
39
40
        $blog->check_permission();