Use the $security variable which contains processed values, instead of
the raw value from the request.
Patch by kareila.
diffs (21 lines):
diff -r 0a9810fcc06f -r 6f5b183b5756 cgi-bin/ljprotocol.pl
--- a/cgi-bin/ljprotocol.pl Tue Jun 15 15:04:07 2010 +0800
+++ b/cgi-bin/ljprotocol.pl Tue Jun 15 16:35:02 2010 +0800
@@ -1425,7 +1425,7 @@ sub postevent
return $fail->($err,501,$dberr) if $dberr;
LJ::MemCache::incr([$ownerid, "log2ct:$ownerid"]);
- $uowner->clear_daycounts( $qallowmask || $req->{security} );
+ $uowner->clear_daycounts( $qallowmask || $security );
# set userprops.
{
@@ -2010,7 +2010,7 @@ sub editevent
}
return fail($err,501,$dbcm->errstr) if $dbcm->err;
- $uowner->clear_daycounts( $oldevent->{allowmask} + 0 ||
$oldevent->{security}, $req->{allowmask} + 0 || $req->{security} );
+ $uowner->clear_daycounts( $oldevent->{allowmask} + 0 ||
$oldevent->{security}, $qallowmask || $security );
$res->{itemid} = $itemid;
if (defined $oldevent->{'anum'}) {
_______________________________________________
dw-changelog mailing list
[email protected]
http://lists.dwscoalition.org/mailman/listinfo/dw-changelog
