mahara-contributors team mailing list archive

[Dan Poltawski <618306@xxxxxxxxxxxxxxxxxx>]

Public bug reported:

The plans page doesn't check the artefact type, so a user could alter
the id field and attempt to add tasks to an image for example by going
to the url:

http://mahara/artefact/plans/plan.php?id={id of an non-plan artefact}

** Affects: mahara
     Importance: Undecided
         Status: New

-- 
Plans page doesn't check artefact type
https://bugs.launchpad.net/bugs/618306
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.

Status in Mahara ePortfolio: New

Bug description:
The plans page doesn't check the artefact type, so a user could alter the id field and attempt to add tasks to an image for example by going to the url:

http://mahara/artefact/plans/plan.php?id={id of an non-plan artefact}