View Issue Details

Jump to NotesJump to History
This bug affects 1 person(s).
 2
IDProjectCategoryView StatusDate SubmittedLast Update
19503Bug reportsTheme editorpublic2024-03-29 15:472024-04-01 11:00
ReporterDenisChenu Assigned To 
PrioritynoneSeverityminor 
Status newResolutionopen 
Product Version5.6.x 
Summary19503: Theme start by space can be created but not deleted, delete
Description

When create a theme start by space it accepted, but when you try to delete : you can not because of security reason

Steps To Reproduce

Steps to reproduce

Create a theme " themewithspace"
Uninstall theme
Try to delete theme

Other way:
Create "extend_vanilla"
Extend to " extend_vanilla"
Delete

Expected result

Theme was deleted (maybe with a warning)

Actual result

Receive a 403 error.

Steps to reproduce

Other way:
Create "extend_vanilla"
Extend to " extend_vanilla"
Delete " extend_vanilla" theme

Expected result

" extend_vanilla" theme was deleted

Actual result

"extend_vanilla" theme was deleted

Additional Information

I think it can be worst ! You can delete another directory !
Confirm

TagsNo tags attached.
Bug heat2
Complete LimeSurvey version number (& build)5.6.57
I will donate to the project if issue is resolvedNo
Browsernot relevant
Database type & versionmssql
Server OS (if known)windows
Webserver software & version (if known)IIS
PHP Version8.0

Relationships

Relationship GraphDependency Graph
related to 19502 new Invalid theme goes to max_execution_time 

Users monitoring this issue

There are no users monitoring this issue.

Activities

DenisChenu

DenisChenu

2024-03-29 15:49

developer   ~79848

With windows : PHP create the directory but you can not add a space via file browser …
And seems space was dleted when copying directory …
It can be a good idea to disallow space at start or end.

Capture d’écran du 2024-03-29 14-48-27.png (93,716 bytes)   
Capture d’écran du 2024-03-29 14-48-27.png (93,716 bytes)   
DenisChenu

DenisChenu

2024-03-29 15:49

developer   ~79849

Oh !
I think it can be worst ! You can delete another directory !

Issue History

Date Modified Username Field Change
2024-03-29 15:47 DenisChenu New Issue
2024-03-29 15:49 DenisChenu Note Added: 79848
2024-03-29 15:49 DenisChenu File Added: Capture d’écran du 2024-03-29 14-48-27.png
2024-03-29 15:49 DenisChenu Bug heat 0 => 2
2024-03-29 15:49 DenisChenu Note Added: 79849
2024-04-01 11:00 DenisChenu Summary Theme start by space can be created but not deleted => Theme start by space can be created but not deleted, delete
2024-04-01 11:00 DenisChenu Steps to Reproduce Updated
2024-04-01 11:00 DenisChenu Additional Information Updated
2024-04-01 11:00 DenisChenu Relationship added related to 19502