View Issue Details

Jump to NotesJump to History
This issue affects 1 person(s).
 252
IDProjectCategoryView StatusDate SubmittedLast Update
11242Bug reportsSecuritypublic2016-05-23 15:542016-05-23 15:56
ReporterDenisChenu Assigned ToLouisGac 
PrioritynoneSeverityminor 
Status closedResolutionfixed 
Product Version2.50.x 
Summary11242: All survey can be deleted without any POST confirmation
Description

Click on a malformed ling, if you have a surveyid 1000 for example a simple clikc on

example.org/admin/survey/sa/deleteMultipleSurveys/sSurveys/%5B1000%5D

Steps To Reproduce

And more :

example.org/admin/survey/sa/deleteMultipleSurveys/sSurveys/%5B1%2C23%2C4%5D : delete 4 surveys without control.

Additional Information

All DB update part must be POST controlled.

TagsNo tags attached.
Bug heat252
Complete LimeSurvey version number (& build)20160523
I will donate to the project if issue is resolvedNo
Browsernot relevant
Database type & versionnot relevant
Server OS (if known)not relevant
Webserver software & version (if known)not relevant
PHP Versionnot relevant

Users monitoring this issue

There are no users monitoring this issue.

Activities

LouisGac

LouisGac

2016-05-23 15:56

developer   ~38736

That's not a bug, that's a cycle of dev ;-)

Issue History

Date Modified Username Field Change
2016-05-23 15:54 DenisChenu New Issue
2016-05-23 15:54 DenisChenu Assigned To => LouisGac
2016-05-23 15:54 DenisChenu Status new => assigned
2016-05-23 15:56 LouisGac Note Added: 38736
2016-05-23 15:56 LouisGac Status assigned => closed
2016-05-23 15:56 LouisGac Resolution open => fixed