Package: mantis
Version: 1.0.8-4.1
Severity: important

Users can not delete attachments in bug reports since mantis updraded
from 1.0.8-4 to 1.0.8-4.1.

When I click on the [delete] link I got redirected to an error page
saying:
 "APPLICATION ERROR #19"
followed by a message (in french for me) that tell me to click the
Back button.

I think this issue appeared since bug #481504 has been fixed.
This is because the delete link tries to perform a critical operation
using GET method, which is now impossible.

I wrote a quick-and-dirty patch to temporarily fix this.
I provide it here directly inside the bug report because I don't know
how to attach a file using the reportbug command.

My temporary patch (along with the commands I typed to get it):
 $ cd /usr/share/mantis/www/core
 $ diff -u file_api.php.before_fangebault file_api.php

--- file_api.php.before_fangebault      2008-06-11 10:42:00.000000000 +0200
+++ file_api.php        2008-06-11 11:09:11.000000000 +0200
@@ -176,7 +176,15 @@
                                $t_href_end . "$t_href_clicket ($t_filesize 
bytes) <span class=\"italic\">$t_date_added</span>";

                        if ( $t_can_delete ) {
-                               PRINT " [<a class=\"small\" 
href=\"bug_file_delete.php?file_id=$v_id\">" . lang_get('delete_link') . 
'</a>]';
+# XXX start - added by fangebault
+                               PRINT "\n               <form 
action=\"bug_file_delete.php\" method=\"post\">\n";
+                               PRINT "                 <input type=\"hidden\" 
name=\"file_id\" value=\"$v_id\" />\n";
+                               PRINT "                 <input type=\"submit\" 
value=\"" . lang_get('delete_link') . "\" />\n";
+                               PRINT "         </form>\n";
+# XXX stop - added by fangebault
+
+# XXX commented out by fangebault
+#                              PRINT " [<a class=\"small\" 
href=\"bug_file_delete.php?file_id=$v_id\">" . lang_get('delete_link') . 
'</a>]';
                        }

                        if ( ( FTP == config_get( 'file_upload_method' ) ) && 
file_exists ( $v_diskfile ) ) {


-- System Information:
Debian Release: 4.0
  APT prefers stable
  APT policy: (990, 'stable'), (500, 'testing')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.23-1-686-bigmem
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)

Versions of packages mantis depends on:
ii  apache2                   2.2.3-4+etch4  Next generation, scalable, extenda
ii  apache2-mpm-prefork [http 2.2.3-4+etch4  Traditional model for Apache HTTPD
ii  dbconfig-common           1.8.29+etch1   common framework for packaging dat
ii  debconf                   1.5.11etch1    Debian configuration management sy
ii  libapache2-mod-php5       5.2.0-8+etch11 server-side, HTML-embedded scripti
ii  libphp-adodb              4.93a-1.1      The 'adodb' database abstraction l
ii  libphp-phpmailer          1.73-2etch1    full featured email transfer class
ii  mysql-client              5.0.32-7etch5  mysql database client (meta packag
ii  mysql-client-5.0 [mysql-c 5.0.32-7etch5  mysql database client binaries
ii  php5-mysql                5.2.0-8+etch11 MySQL module for php5

mantis recommends no packages.

-- debconf information excluded



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to