bugsweb better fix for the original problem

bugsweb_sec_patch.diff

diff --git a/www/bug.php b/www/bug.php
index 1b3474c..fe24674 100644
--- a/www/bug.php
+++ b/www/bug.php
@@ -158,8 +158,9 @@ if (!empty($_POST['in'])) {
        if ($user_flags & BUGS_DEV_USER) {
                $block_user = isset($_POST['in']['block_user_comment']) ? 'Y' : 'N';
        }
-       if ($is_security_developer) {
-               $is_private = isset($_POST['in']['private']) ? 'Y': 'N';
+       // security devs can change the private flag, if the field is set 'N' will make it private, everything else 'Y'. fail secure
+       if ($is_security_developer && isset($_POST['in']['private'])) {
+               $is_private = $_POST['in']['private'] == 'N' ? 'N': 'Y';
        }
 }