#1250 ✓resolved
dleffler

Bug: some sites do not pass form arrays, nor delete uploaded files

Reported by dleffler | December 27th, 2014 @ 02:49 PM | in 2.3.3 (closed)

Since the implementation of scrubbing all input for xss vulnerabilities, we don't seem to be passing arrays such as sort order reranking, etc... on some server configurations.

Comments and changes to this ticket

  • dleffler

    dleffler December 27th, 2014 @ 09:00 PM

    • Title changed from “Bug: some sites do not pass form arrays” to “Bug: some sites do not pass form arrays, nor delete uploaded files”

    This may also cause an inability to delete files from the file manager (we pass the list of file id's by array)

  • dleffler

    dleffler December 31st, 2014 @ 12:54 AM

    • State changed from “new” to “resolved”
    • Assigned user set to “dleffler”

    Fixed with recent push..regression bug from recent security fixes where we weren't walking the arrays in $_REQUEST, $_GET, $_POST, nor $_COOKIE on magic quotes enabled installations

Please Sign in or create a free account to add a new ticket.

With your very own profile, you can contribute to projects, track your activity, watch tickets, receive and update tickets through your email and much more.

New-ticket Create new ticket

Create your profile

Help contribute to this project by taking a few moments to create your personal profile. Create your profile ยป

Bug Tracker for Exponent CMS

Shared Ticket Bins

People watching this ticket

Pages