From 5bb6d9333dbc6f88ccd5e9071cddf05a4308188b Mon Sep 17 00:00:00 2001
From: Alexander Pickering <alexandermpickering@gmail.com>
Date: Tue, 10 May 2016 20:00:29 -0400
Subject: Added hidden field to comment on bug

---
 ws2a/bugcomment.c | 4 ++++
 ws2a/bugview.js   | 9 ++++++++-
 2 files changed, 12 insertions(+), 1 deletion(-)

diff --git a/ws2a/bugcomment.c b/ws2a/bugcomment.c
index 10df1d1..98d00be 100644
--- a/ws2a/bugcomment.c
+++ b/ws2a/bugcomment.c
@@ -9,6 +9,10 @@ int main(){
   char* hardip = getenv("REMOTE_ADDR");
   printf("%s%c%c\n","Content-Type:text/html;charset=iso-8859-1",13,10);
   printf("data:%s",data);
+  char name[15];
+  char userid[20];
+  char comment[2048];
+  char captcha[25];
   /*
   FILE* lastfilenum;
   lastfilenum = fopen("../ws2a/bugs/lastbug","r");
diff --git a/ws2a/bugview.js b/ws2a/bugview.js
index 3d695d6..4b3ac44 100644
--- a/ws2a/bugview.js
+++ b/ws2a/bugview.js
@@ -75,7 +75,14 @@ function loadLastBugs() {
   captcha.onreadystatechange = function() {
     if (captcha.readyState == 4 && captcha.status == 200) {
       var id = captcha.response;
-      document.getElementById("captcha").innerHTML = "<img src=\"./captchas/" + id + ".png\"><input type=\"hidden\" name=\"bugid\" value=\"" + bugnum + ">";
+      document.getElementById("captcha").innerHTML = "<img src=\"./captchas/" + id + ".png\">";
+      var query = getQueryStrings();
+      var bugnum = query["id"];
+      var hid = document.createElement("input");
+      hid.setAttribute("type","hidden");
+      hid.setAttribute("name","bugid");
+      hid.setAttribute("value",bugnum);
+      document.getElementsByTagName("form").appendChild(hid)
     }
   }
   captcha.open("GET", "/cgi-bin/gencaptcha.cgi",true);
-- 
cgit v1.2.3-70-g09d2


From db774ac74e017a75ce2f7330e7debfa1309eab93 Mon Sep 17 00:00:00 2001
From: Alexander Pickering <alexandermpickering@gmail.com>
Date: Tue, 10 May 2016 20:08:42 -0400
Subject: added dbug statements to find where the hidden field is added

---
 ws2a/bugview.js | 1 +
 1 file changed, 1 insertion(+)

diff --git a/ws2a/bugview.js b/ws2a/bugview.js
index 4b3ac44..3556d1e 100644
--- a/ws2a/bugview.js
+++ b/ws2a/bugview.js
@@ -83,6 +83,7 @@ function loadLastBugs() {
       hid.setAttribute("name","bugid");
       hid.setAttribute("value",bugnum);
       document.getElementsByTagName("form").appendChild(hid)
+      console.log("Added hidden field to form:" + bugnum);
     }
   }
   captcha.open("GET", "/cgi-bin/gencaptcha.cgi",true);
-- 
cgit v1.2.3-70-g09d2