Joomla! Issue Tracker - CMS

Download
Launch
Feeling Lucky

[#30103] - [4.0][com_messages] Validate reply ID and user ID

? Pending

User tests: Successful: Unsuccessful:

avatar Quy
Quy
14 Jul 2020

Pull Request for Issue #29562.

Summary of Changes

Validate reply_id and user_id to ensure there is a private message sent to you to reply to.

Testing Instructions

Fake a reply_id
/administrator/index.php?option=com_messages&view=message&layout=edit&reply_id=666999666

Actual result BEFORE applying this Pull Request

Message compose page loads, Re: in subject line

Expected result AFTER applying this Pull Request

An error message

avatar Quy Quy - open - 14 Jul 2020
avatar Quy Quy - change - 14 Jul 2020
Status New ⇒ Pending
avatar joomla-cms-bot joomla-cms-bot - change - 14 Jul 2020
Category ⇒ Administration com_messages
avatar Quy Quy - change - 15 Jul 2020
Labels Added: ?
avatar Quy Quy - change - 15 Jul 2020
The description was changed
avatar Quy Quy - edited - 15 Jul 2020
avatar ceford ceford - test_item - 15 Jul 2020 - Tested successfully
avatar ceford
ceford - comment - 15 Jul 2020

I have tested this item ✅ successfully on c2ab0dc

An error has occurred.

500 You don't have permission to access this. Please contact a website administrator if this is incorrect.
This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/30103.
avatar Quy
Quy - comment - 15 Jul 2020

Closing, Issue in J3 too. Please test PR #30111 that will be ported to J4. Thanks.

avatar Quy Quy - change - 15 Jul 2020
Status Pending ⇒ Closed
Closed_Date 0000-00-00 00:00:00 ⇒ 2020-07-15 18:38:22
Closed_By ⇒ Quy
avatar Quy Quy - close - 15 Jul 2020

Add a Comment

Login with GitHub to post a comment