| Index
» Projects
» phpMyEdit
» Bug list
» Bug #647 |
 |
|
Viewing Bug Advanced Details |
[ Jump to Bugnotes ]
[ Bug History ]
[ Print ]
|
|
ID |
Category |
Severity |
Reproducibility |
Date Submitted |
Last Update |
|
0000647 |
core / general |
minor |
always |
2009-05-30 00:02 |
2009-05-30 00:02 |
|
|
|
Reporter |
jay |
View Status |
public |
|
|
Assigned To |
|
|
Priority |
normal |
Resolution |
open |
Platform |
phpMyEdit |
|
Status |
new |
Duplicate ID |
|
OS |
|
|
Projection |
none |
|
Version |
|
|
ETA |
none |
|
Product Version |
5.7.1 (stable) |
|
|
Product Build |
|
|
|
Votes |
1 |
|
|
|
Summary |
It is easy to bypass filters |
|
Description |
I'm not sure if the intended function of the filters is for security, but we use the filters to prevent unauthorized users from seeing database fields. It was found that the filters in list view could be bypassed by going directly to a "view" url. |
|
Steps To Reproduce |
|
|
Additional Information / Solution |
if ($this->filters)
$ret .= ' AND '.$this->filters; |
|
Attached Files |
|
|
|
|
There are no notes attached to this bug. |
|
Bug History |
|
Date Modified |
Username |
Field |
Change |
|
2009-05-30 00:02 |
jay |
New Bug |
|
|
|
Login
Registration
Slovak
