diff options
-rw-r--r-- | CGI.pl | 2 | ||||
-rwxr-xr-x | votes.cgi | 4 |
2 files changed, 4 insertions, 2 deletions
@@ -904,7 +904,7 @@ sub CheckIfVotedConfirmed { SendSQL("SELECT bugs.votes, bugs.bug_status, products.votestoconfirm, " . " bugs.everconfirmed " . "FROM bugs, products " . - "WHERE bugs.bug_id = $id AND products.product_id = bugs.product_id"); + "WHERE bugs.bug_id = $id AND products.id = bugs.product_id"); my ($votes, $status, $votestoconfirm, $everconfirmed) = (FetchSQLData()); if ($votes >= $votestoconfirm && $status eq $::unconfirmedstate) { SendSQL("UPDATE bugs SET bug_status = 'NEW', everconfirmed = 1 " . @@ -134,6 +134,7 @@ sub show_user { my $canedit = 1 if ($name eq $::COOKIE{'Bugzilla_login'}); SendSQL("LOCK TABLES bugs READ, products READ, votes WRITE, + cc READ, bug_group_map READ, user_group_map READ, cc AS selectVisible_cc READ"); if ($canedit && $bug_id) { @@ -314,7 +315,8 @@ sub record_votes { # for products that only allow one vote per bug). In that case, we still # need to clear the user's votes from the database. my %affected; - SendSQL("LOCK TABLES bugs write, votes write, products read"); + SendSQL("LOCK TABLES bugs write, votes write, products read, cc read, + user_group_map read, bug_group_map read"); # Take note of, and delete the user's old votes from the database. SendSQL("SELECT bug_id FROM votes WHERE who = $who"); |