whew, glad that change package bugfix was easy to find, closes: Bug#3241

1 files changed, 6 insertions, 1 deletions

diff --git a/httemplate/edit/process/cust_pkg.cgi b/httemplate/edit/process/cust_pkg.cgi
index 0dc82a600..272ddcc47 100755
--- a/httemplate/edit/process/cust_pkg.cgi
+++ b/httemplate/edit/process/cust_pkg.cgi
@@ -36,11 +36,16 @@ if ( $cgi->param('action') eq 'change' ) { #came from misc/change_pkg.cgi
 
   $action = 'change';
   $error_redirect = "misc/change_pkg.cgi";
-  @pkgparts = ($1);
 
   die "access denied"
     unless $curuser->access_right('Change customer package');
 
+  if ( $cgi->param('new_pkgpart') =~ /^(\d+)$/ ) {
+    @pkgparts = ($1);
+  } else {
+    $error = 'Select a new package';
+  }
+
 } elsif ( $cgi->param('action') eq 'bulk' ) { #came from edit/cust_pkg.cgi
 
   $action = 'bulk';