?
avatar bassmanpaul
bassmanpaul
13 Dec 2016

On looking through Joomla's registration model I can see 2 instances where admin emails are collected in order to send notifications to. It looks like the query needs to be checking the user's block state otherwise registration notification emails will be sent to users who are blocked.

There is a 3rd instance that is correctly checking the block state which suggests the others need to perform this check as well.

The incorrect lines in question are:
https://github.com/joomla/joomla-cms/blob/staging/components/com_users/models/registration.php#L137
https://github.com/joomla/joomla-cms/blob/staging/components/com_users/models/registration.php#L580

The correct version is:
https://github.com/joomla/joomla-cms/blob/staging/components/com_users/models/registration.php#L621

The missing where clause being:

->where($db->quoteName('block') . ' = ' . (int) 0)

I can create a pull request and add the missing clauses if it needs updating and that would help?

avatar bassmanpaul bassmanpaul - open - 13 Dec 2016
avatar joomla-cms-bot joomla-cms-bot - change - 13 Dec 2016
Labels Added: ?
avatar joomla-cms-bot joomla-cms-bot - labeled - 13 Dec 2016
avatar zero-24
zero-24 - comment - 10 Jan 2017

PR: #13545

avatar zero-24 zero-24 - change - 10 Jan 2017
Status New Closed
Closed_Date 0000-00-00 00:00:00 2017-01-10 22:56:24
Closed_By zero-24
avatar zero-24 zero-24 - close - 10 Jan 2017

Add a Comment

Login with GitHub to post a comment