mahara-contributors team mailing list archive

[Aaron Wells <1480764@xxxxxxxxxxxxxxxxxx>]

** Also affects: mahara/15.10
   Importance: Undecided
       Status: New

** Also affects: mahara/15.10
   Importance: Undecided
       Status: Fix Released

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it!
https://bugs.launchpad.net/bugs/1480764

Title:
  Transient login form can't handle array variables

Status in Mahara:
  Fix Committed
Status in Mahara 15.10 series:
  Fix Released

Bug description:
  You know how, when you're logged out of Mahara and you try to go to a
  page that isn't shared with the public, and you see a login form? We
  call that the "transient login page".

  It tries to be smart and remember the URL that you were trying to
  reach, and then forward you on there again after you log in. But the
  code that does just iterates over $_GET and runs htmlspecialchars() on
  each key & value. And this causes problems if the URL contains array
  values, i.e. http://www.example.com?foo[]=value1&foo[]=value2

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1480764/+subscriptions