[PHPBB3-12002] Extension management page should use generate/check link hash

XML

Word

Printable

Details

Type: Bug
Status: Closed (View Workflow)
Priority: Blocker
Resolution: Fixed
Affects Version/s: 3.1.0-a1
Fix Version/s: 3.1.0-a2
Component/s: ACP
Labels:
None

GitHub Pull Request URL:
https://github.com/phpbb/phpbb/pull/1855

Description

Currently the links for enabling/disabling/delete-data do not use form-tokens, link hash nor confirm_box. One of the security mechanismns should be used.

Attachments

Issue Links

depends on

PHPBB3-11994 Admin options for extensions are bad/misleading

Closed

Activity

People

Assignee:: Joas Schilling

Reporter:: Joas Schilling

Votes:: 0 Vote for this issue

Watchers:: 1 Start watching this issue

Dates

Created:: 03/Nov/13 10:43 PM

Updated:: 22/Jan/17 4:01 PM

Resolved:: 11/Nov/13 5:08 PM