Bug #4431
closed
Posting to a params column results in every input in the POST being stored
Added by krileon over 10 years ago.
Updated about 10 years ago.
Start date:
28 February 2014
Description
When posting to a params column (new CB Configuration) every input in the form is stored. Even those that shouldn't like the following.
option=com_comprofiler
task=showconfig
act=save
cbsecuritym3=cbm_058c9b81_544dc2e7_701ce0508081b3ff63f6babc6e28031f
Believe this is due to post handling of sql:field in ActionController.php.
- Status changed from Assigned to Resolved
- % Done changed from 0 to 100
Hardcoded values like task, etc.. are now filtered out. Action path variables are also now removed.
- Priority changed from High to Normal
- Status changed from Resolved to Closed
Also available in: Atom
PDF