[interchange-cvs] interchange - heins modified lib/Vend/Dispatch.pm

[interchange-cvs at icdevgroup.org]

User:      heins
Date:      2004-02-24 19:21:09 GMT
Modified:  lib/Vend Tag: STABLE_5_0-branch Dispatch.pm
Log:
* Merge security fix from head.

Revision  Changes    Path
No                   revision



No                   revision



1.28.2.2  +7 -2      interchange/lib/Vend/Dispatch.pm


rev 1.28.2.2, prev_rev 1.28.2.1
Index: Dispatch.pm
===================================================================
RCS file: /var/cvs/interchange/lib/Vend/Dispatch.pm,v
retrieving revision 1.28.2.1
retrieving revision 1.28.2.2
diff -u -r1.28.2.1 -r1.28.2.2
--- Dispatch.pm	30 Jan 2004 17:36:52 -0000	1.28.2.1
+++ Dispatch.pm	24 Feb 2004 19:21:09 -0000	1.28.2.2
@@ -1,6 +1,6 @@
 # Vend::Dispatch - Handle Interchange page requests
 #
-# $Id: Dispatch.pm,v 1.28.2.1 2004/01/30 17:36:52 mheins Exp $
+# $Id: Dispatch.pm,v 1.28.2.2 2004/02/24 19:21:09 mheins Exp $
 #
 # Copyright (C) 2002-2003 Interchange Development Group
 # Copyright (C) 2002 Mike Heins <mike at perusion.net>
@@ -26,7 +26,7 @@
 package Vend::Dispatch;
 
 use vars qw($VERSION);
-$VERSION = substr(q$Revision: 1.28.2.1 $, 10);
+$VERSION = substr(q$Revision: 1.28.2.2 $, 10);
 
 use POSIX qw(strftime);
 use Vend::Util;
@@ -564,6 +564,11 @@
 	cancel	=> sub {
 					put_session();
 					get_session();
+					undef $Vend::username;
+					undef $Vend::admin;
+					undef $Vend::groups;
+					undef $Vend::superuser;
+					undef $Vend::login_table;
 					init_session();
 					$CGI::values{mv_nextpage} = find_special_page('canceled')
 						if ! $CGI::values{mv_nextpage};