mahara-contributors team mailing list archive

[Richard Mansfield <618306@xxxxxxxxxxxxxxxxxx>]

** Changed in: mahara
       Status: New => Fix Committed

** Changed in: mahara
   Importance: Undecided => High

** Changed in: mahara
     Assignee: (unassigned) => Richard Mansfield (richard-mansfield)

** Changed in: mahara
    Milestone: None => 1.3.0

-- 
Plans page doesn't check artefact type
https://bugs.launchpad.net/bugs/618306
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.

Status in Mahara ePortfolio: Fix Committed

Bug description:
The plans page doesn't check the artefact type, so a user could alter the id field and attempt to add tasks to an image for example by going to the url:

http://mahara/artefact/plans/plan.php?id={id of an non-plan artefact}