Bug #4431
closed
  
Posting to a params column results in every input in the POST being stored
 
        
        Added by krileon over 11 years ago.
        Updated about 11 years ago.
        
Start date:
28 February 2014
 
 
  
  
  
  Description
  
  When posting to a params column (new CB Configuration) every input in the form is stored. Even those that shouldn't like the following.
	option=com_comprofiler
task=showconfig
act=save
cbsecuritym3=cbm_058c9b81_544dc2e7_701ce0508081b3ff63f6babc6e28031f
   
 
 
  
  
    
    
    
    Believe this is due to post handling of sql:field in ActionController.php.
 
     
   
  
  
    
    
    
    
       - Status changed from Assigned to Resolved
 
       - % Done changed from 0 to 100
 
    
    Hardcoded values like task, etc.. are now filtered out. Action path variables are also now removed.
 
     
   
  
  
    
    
    
    
       - Priority changed from High to Normal
 
    
    
     
   
  
  
    
    
    
    
       - Status changed from Resolved to Closed
 
    
    
     
   
  
 
  
  
 
Also available in:  Atom
  PDF