Lack of permission checks in Frontend.

XMLWordPrintable

    • Type: Incident report
    • Resolution: Fixed
    • Priority: Minor
    • 2.0.4rc1, 2.1.0
    • Affects Version/s: 2.0.4, 2.1.0
    • Component/s: Frontend (F)
    • None

      It is possible to open many pages with incorrect ID and see undefined indexes or no data. Instead correct error message must be showen. Code must be similar with:
      $myIds = get_request('myid');
      if (empty($myIds))

      { access_deny(); }

      Affected pages:
      Administration->General->Icon mapping
      Administration->General->Images
      Administration->General->Value mapping
      Administration->General->Regular expressions
      Administration->MediaTypes
      .. and others

            Assignee:
            Oleg Egorov (Inactive)
            Reporter:
            Eduards Samersovs (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

              Created:
              Updated:
              Resolved: