mahara-contributors team mailing list archive

[Richard Mansfield <618306@xxxxxxxxxxxxxxxxxx>]

** Changed in: mahara
       Status: Fix Committed => Fix Released

-- 
Plans page doesn't check artefact type
https://bugs.launchpad.net/bugs/618306
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.

Status in Mahara ePortfolio: Fix Released

Bug description:
The plans page doesn't check the artefact type, so a user could alter the id field and attempt to add tasks to an image for example by going to the url:

http://mahara/artefact/plans/plan.php?id={id of an non-plan artefact}