From 67d171a04ecbccbfd7d5fc2f1be2810299008c15 Mon Sep 17 00:00:00 2001
From: Ivan Kohler <ivan@freeside.biz>
Date: Mon, 24 Jul 2017 14:02:57 -0700
Subject: [PATCH] scalar param

---
 httemplate/edit/process/cust_main_attach.cgi | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/httemplate/edit/process/cust_main_attach.cgi b/httemplate/edit/process/cust_main_attach.cgi
index 20673dc9b..cdf93ceab 100644
--- a/httemplate/edit/process/cust_main_attach.cgi
+++ b/httemplate/edit/process/cust_main_attach.cgi
@@ -51,7 +51,7 @@ if($attachnum) {
       ('_date', 'otaker', 'body', 'disabled');
     $new->filename($filename || $old->filename);
     $new->mime_type($cgi->param('mime_type') || $old->mime_type);
-    $new->title($cgi->param('title'));
+    $new->title( scalar($cgi->param('title')) );
     if($delete and not $old->disabled) {
       $new->disabled(time);
     }
@@ -65,8 +65,10 @@ else { # This is a new attachment, so require a file.
   if($filename) {
     $new->filename($filename);
     # use the original filename here, not the stripped form
-    $new->mime_type($cgi->uploadInfo($cgi->param('file'))->{'Content-Type'});
-    $new->title($cgi->param('title'));
+    $new->mime_type(
+      $cgi->uploadInfo( scalar($cgi->param('file')) )->{'Content-Type'}
+    );
+    $new->title( scalar($cgi->param('title')) );
     
     local $/;
     my $fh = $cgi->upload('file');
-- 
2.11.0