mahara-contributors team mailing list archive
-
mahara-contributors team
-
Mailing list archive
-
Message #01541
[Bug 618306] Re: Plans page doesn't check artefact type
** Changed in: mahara
Status: Fix Committed => Fix Released
--
Plans page doesn't check artefact type
https://bugs.launchpad.net/bugs/618306
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Status in Mahara ePortfolio: Fix Released
Bug description:
The plans page doesn't check the artefact type, so a user could alter the id field and attempt to add tasks to an image for example by going to the url:
http://mahara/artefact/plans/plan.php?id={id of an non-plan artefact}
References