Public bug reported: The plans page doesn't check the artefact type, so a user could alter the id field and attempt to add tasks to an image for example by going to the url:
http://mahara/artefact/plans/plan.php?id={id of an non-plan artefact} ** Affects: mahara Importance: Undecided Status: New -- Plans page doesn't check artefact type https://bugs.launchpad.net/bugs/618306 You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Status in Mahara ePortfolio: New Bug description: The plans page doesn't check the artefact type, so a user could alter the id field and attempt to add tasks to an image for example by going to the url: http://mahara/artefact/plans/plan.php?id={id of an non-plan artefact} _______________________________________________ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
