From baaf20963687533353e65917554ebf968dbc0f8b Mon Sep 17 00:00:00 2001
From: ivan <ivan>
Date: Fri, 14 Mar 2008 08:13:32 +0000
Subject: [PATCH] whew, glad that change package bugfix was easy to find,
 closes: Bug#3241

---
 httemplate/edit/process/cust_pkg.cgi | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/httemplate/edit/process/cust_pkg.cgi b/httemplate/edit/process/cust_pkg.cgi
index 0dc82a600..272ddcc47 100755
--- a/httemplate/edit/process/cust_pkg.cgi
+++ b/httemplate/edit/process/cust_pkg.cgi
@@ -36,11 +36,16 @@ if ( $cgi->param('action') eq 'change' ) { #came from misc/change_pkg.cgi
 
   $action = 'change';
   $error_redirect = "misc/change_pkg.cgi";
-  @pkgparts = ($1);
 
   die "access denied"
     unless $curuser->access_right('Change customer package');
 
+  if ( $cgi->param('new_pkgpart') =~ /^(\d+)$/ ) {
+    @pkgparts = ($1);
+  } else {
+    $error = 'Select a new package';
+  }
+
 } elsif ( $cgi->param('action') eq 'bulk' ) { #came from edit/cust_pkg.cgi
 
   $action = 'bulk';
-- 
2.11.0