Patch by Sam Ziegler <ziegler@mediaguaranty.com> -- do some sanity

checking on the list of column names we're given.

webtools/bugzilla/buglist.cgi

@@ -23,6 +23,7 @@ puts "Content-type: multipart/x-mixed-replace;boundary=ThisRandomString"
 puts ""
 puts "--ThisRandomString"
 
+
 # The below "if catch" stuff, if uncommented, will trap any error, and
 # mail the error messages to terry.  What a hideous, horrible
 # debugging hack.
@@ -155,9 +156,11 @@ select
 
 
 foreach c $collist {
+    if {[info exists needquote($c)] } {
         append query ",
 \t$key($c)"
     }
+}
 
 
 if {$dotweak} {
@@ -238,6 +241,7 @@ Click the <B>Back</B> button and try again."
 
 }
 
+
 if {[info exists FORM(order)]} {
     qadd "order by "
     switch -glob $FORM(order) {
@@ -267,7 +271,6 @@ if {[info exists FORM(debug)]} {
     puts "<pre>$query</pre>"
 }
 flush stdout
-
 SendSQL $query
 
 set count 0
@@ -297,6 +300,7 @@ set tablestart "<TABLE CELLSPACING=0 CELLPADDING=2>
 
 
 foreach c $collist {
+    if { [info exists needquote($c)] } {
         if {$needquote($c)} {
             append tablestart "<TH WIDTH=100% valigh=left>"
         } else {
@@ -308,6 +312,7 @@ foreach c $collist {
             append tablestart $title($c)
         }
     }
+}
 
 append tablestart "\n"
 
@@ -366,7 +371,7 @@ while { $p_true } {
 
                 } 
 
-                if {$needquote($c)} {
+                if { [info exists needquote($c)] && $needquote($c)} {
                     set value [html_quote $value]
                 } else {
                     set value "<nobr>$value</nobr>"
@@ -383,7 +388,6 @@ while { $p_true } {
         }
     }
 }
-
 puts ""
 puts "--ThisRandomString"
 
@@ -398,7 +402,6 @@ if { [info exists buglist] } {
     }
 }
 puts ""
-
 set env(TZ) PST8PDT
 
 PutHeader "Bug List" "Bug List"