Project

General

Profile

Actions
Copy link

Bug #4431

closed

Posting to a params column results in every input in the POST being stored

Bug #4431: Posting to a params column results in every input in the POST being stored

Added by krileon almost 12 years ago. Updated about 11 years ago.

Status:
Closed
Priority:
Normal
Assignee:
beat
Target version:
CB 2.0.0
Start date:
28 February 2014
Due date:
% Done:

100%

Estimated time:

Description

When posting to a params column (new CB Configuration) every input in the form is stored. Even those that shouldn't like the following.

option=com_comprofiler
task=showconfig
act=save
cbsecuritym3=cbm_058c9b81_544dc2e7_701ce0508081b3ff63f6babc6e28031f

Updated by krileon almost 12 years ago Actions
Copy link
 #1

Believe this is due to post handling of sql:field in ActionController.php.

Updated by krileon almost 12 years ago Actions
Copy link
 #2

  • Status changed from Assigned to Resolved
  • % Done changed from 0 to 100

Hardcoded values like task, etc.. are now filtered out. Action path variables are also now removed.

Updated by beat over 11 years ago Actions
Copy link
 #3

  • Priority changed from High to Normal

Updated by beat about 11 years ago Actions
Copy link
 #4

  • Status changed from Resolved to Closed
Actions
Copy link

Also available in: PDF Atom