Uploaded image for project: 'phpBB3'
  1. phpBB3
  2. PHPBB3-11525

phpbb_avatar_manager::clean_row collapses user_id and group_id

    Details

    • Type: Bug
    • Status: Unverified Fix
    • Priority: Blocker
    • Resolution: Fixed
    • Affects Version/s: 3.1.0-dev
    • Fix Version/s: 3.1.0-a2
    • Labels:
      None

      Description

      The function clean_row in phpbb_avatar_manager collapses the 'user_id' and 'group_id' properties from the user row to a single 'id' property, which is group_id. This causes uploaded avatars to have conflicted filenames, using the group ID as filename rather than the user ID.

        Activity

        Hide
        Marshalrusty Yuriy Rusko added a comment - - edited

        This is causing serious issues on area51 and needs to be fixed ASAP. Including, potentially, people's faces showing up on unrelated profiles.

        Show
        Marshalrusty Yuriy Rusko added a comment - - edited This is causing serious issues on area51 and needs to be fixed ASAP. Including, potentially, people's faces showing up on unrelated profiles.

          People

          • Assignee:
            Marc Marc
            Reporter:
            bast bast
          • Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved:

              Development