Uploaded image for project: 'phpBB3'
  1. phpBB3
  2. PHPBB3-11525

phpbb_avatar_manager::clean_row collapses user_id and group_id

          Details

          • Type: Bug
          • Status: Unverified Fix
          • Priority: Blocker
          • Resolution: Fixed
          • Affects Version/s: 3.1.0-dev
          • Fix Version/s: 3.1.0-a2
          • Component/s: User Control Panel (UCP)
          • Labels:
            None

            Description

            The function clean_row in phpbb_avatar_manager collapses the 'user_id' and 'group_id' properties from the user row to a single 'id' property, which is group_id. This causes uploaded avatars to have conflicted filenames, using the group ID as filename rather than the user ID.

              Activity

              Hide
              Permalink
              Marshalrusty Yuriy Rusko added a comment - - edited

              This is causing serious issues on area51 and needs to be fixed ASAP. Including, potentially, people's faces showing up on unrelated profiles.

              Show
              Marshalrusty Yuriy Rusko added a comment - - edited This is causing serious issues on area51 and needs to be fixed ASAP. Including, potentially, people's faces showing up on unrelated profiles.

                People

                • Assignee:
                  Marc Marc
                  Reporter:
                  bast bast
                • Votes:
                  0 Vote for this issue
                  Watchers:
                  4 Start watching this issue

                  Dates

                  • Created:
                    Updated:
                    Resolved:

                    Development