Project

General

Profile

Actions
Copy link

Bug #9509

closed

Plan Options: fails in backend if not also logged into frontend as the same user

Added by krileon about 1 month ago. Updated 19 days ago.

Status:
Closed
Priority:
Normal
Assignee:
krileon
Target version:
4.8.0
Start date:
31 October 2024
Due date:
% Done:

100%

Estimated time:

Description

This causes CSRF and all $user checks to fail due to backend and frontend user being different. Backend ajax URLs should be using a backend pluginclass URL instead of frontend pluginclass.

Actions
Copy link

Also available in: Atom PDF