From: Ivan Kohler <ivan@freeside.biz>
Date: Mon, 12 Nov 2012 08:02:44 +0000 (-0800)
Subject: fix XSS
X-Git-Url: http://git.freeside.biz/gitweb/?a=commitdiff_plain;h=e297233dcb54d85fc9b725dfdb4760f85df7d860;p=freeside.git

fix XSS
---

diff --git a/FS/FS/ClientAPI/MyAccount.pm b/FS/FS/ClientAPI/MyAccount.pm
index d5fe15483..bb5b47e5b 100644
--- a/FS/FS/ClientAPI/MyAccount.pm
+++ b/FS/FS/ClientAPI/MyAccount.pm
@@ -2004,8 +2004,8 @@ sub _usage_details {
     $p->{ending}    = $end;
   }
 
-  die "illegal beginning" if $beginning !~ /^\d*$/;
-  die "illegal ending"    if $ending    !~ /^\d*$/;
+  die "illegal beginning" if $p->{beginning} !~ /^\d*$/;
+  die "illegal ending"    if $p->{ending}    !~ /^\d*$/;
 
   my (@usage) = &$callback($svc_x, $p->{beginning}, $p->{ending}, 
     %callback_opt