[Phpns-team] [Bug 247484] Re: User can change own rank
This is fixed in the newest update. Patch released, including all patches, can be found in this zip file- http://kyleosborn.com/phpns/patches/2.2.3.patch.zip Fix includes disabling rank option list when modifying own user profile, and making a check right before updating the database. ** Changed in: phpns Importance: Undecided => Medium Assignee: (unassigned) => KyleO (k-p-osborn) Status: New => Fix Committed ** Changed in: phpns Status: Fix Committed => Fix Released -- User can change own rank https://bugs.launchpad.net/bugs/247484 You received this bug notification because you are a member of Phpns- team, which is a direct subscriber. ___ Mailing list: https://launchpad.net/~phpns-team Post to : phpns-team@lists.launchpad.net Unsubscribe : https://launchpad.net/~phpns-team More help : https://help.launchpad.net/ListHelp
[Phpns-team] [Bug 247484] Re: User can change own rank
This is fixed in the newest update. Patch released, including all patches, can be found in this zip file- http://kyleosborn.com/phpns/patches/2.2.3.patch.zip Fix includes disabling rank option list when modifying own user profile, and making a check right before updating the database. ** Visibility changed to: Public -- User can change own rank https://bugs.launchpad.net/bugs/247484 You received this bug notification because you are a member of Phpns- team, which is a direct subscriber. ___ Mailing list: https://launchpad.net/~phpns-team Post to : phpns-team@lists.launchpad.net Unsubscribe : https://launchpad.net/~phpns-team More help : https://help.launchpad.net/ListHelp
[Phpns-team] [Bug 247484] Re: User can change own rank
** Description changed: - Users can change their own rank, elevating themselves to whatever - predefined levels available. + Users can change their own rank, elevating themselves to whatever predefined levels available. + This can be done the easy way, but just selecting the current user the client is logged in as, and simply modifying it. + Or, a more elaborate way, is to spoof the post data. -- User can change own rank https://bugs.launchpad.net/bugs/247484 You received this bug notification because you are a member of Phpns- team, which is a direct subscriber. ___ Mailing list: https://launchpad.net/~phpns-team Post to : phpns-team@lists.launchpad.net Unsubscribe : https://launchpad.net/~phpns-team More help : https://help.launchpad.net/ListHelp
