** Changed in: mahara
       Status: New => Fix Committed

** Changed in: mahara
   Importance: Undecided => High

** Changed in: mahara
     Assignee: (unassigned) => Richard Mansfield (richard-mansfield)

** Changed in: mahara
    Milestone: None => 1.3.0

-- 
Plans page doesn't check artefact type
https://bugs.launchpad.net/bugs/618306
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.

Status in Mahara ePortfolio: Fix Committed

Bug description:
The plans page doesn't check the artefact type, so a user could alter the id 
field and attempt to add tasks to an image for example by going to the url:

http://mahara/artefact/plans/plan.php?id={id of an non-plan artefact}



_______________________________________________
Mailing list: https://launchpad.net/~mahara-contributors
Post to     : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help   : https://help.launchpad.net/ListHelp

Reply via email to