mahara-packaging team mailing list archive

Thread
Date

[Bug 676336] Re: Blogs get deleted without sesskey check

To: mahara-packaging@xxxxxxxxxxxxxxxxxxx
From: Clint Byrum <clint@xxxxxxxxxx>
Date: Tue, 05 Apr 2011 19:08:39 -0000
Reply-to: Bug 676336 <676336@xxxxxxxxxxxxxxxxxx>
Sender: bounces@xxxxxxxxxxxxx

** Changed in: mahara (Ubuntu Lucid)
       Status: New => Confirmed

** Changed in: mahara (Ubuntu Maverick)
       Status: New => Confirmed

-- 
You received this bug notification because you are a member of Mahara
Packaging, which is subscribed to mahara in Ubuntu.
https://bugs.launchpad.net/bugs/676336

Title:
  Blogs get deleted without sesskey check

Status in Mahara ePortfolio:
  Fix Released
Status in Mahara 1.3 series:
  Fix Released
Status in “mahara” package in Ubuntu:
  Fix Released
Status in “mahara” source package in Lucid:
  Confirmed
Status in “mahara” source package in Maverick:
  Confirmed
Status in “mahara” source package in Natty:
  Fix Released

Bug description:
  Permissions are checked but the sesskey is neither passed nor checked
  e.g. artefact/blog/index.php?delete=123