phplist

NOTE:: Before reporting an issue, make sure you are running the latest version, currently 3.3.1


View Issue Details Jump to Notes ] Print ]
IDProjectCategoryView StatusDate SubmittedLast Update
0001682phplist applicationAuthentication Systempublic07-09-04 20:4518-10-04 17:00
Reportersamos 
PrioritynormalSeveritymajorReproducibilityalways
StatusresolvedResolutionfixed 
PlatformOSOS Version
Product Version 
Target VersionFixed in Version2.9.2 
Summary0001682: Unsubscribe does not requirer password
DescriptionBug 0000642 made reference to this issue and was marked resolved. While it does work (asks for a password) when a user clicks on an unsubscription link that includes their 'uid' (http://www.mydomain.ca/lists/?p=unsubscribe&uid=a4f5854a687f828787c18e8ba8d1f717 [^]).

If a user simply clicks the unsubscribe link on the main subscribe page (http://www.mydomain.com/lists/?p=unsubscribe [^]) they are only prompted for the email address and are able to unsubscribe without ever being prompted for a password.

This makes requiering a password when a 'uid' is supplied completely ineffective.

I have the following related config parameters defined:

$require_login = 1;
define("ASKFORPASSWORD",1);
define("UNSUBSCRIBE_REQUIRES_PASSWORD",1);
TagsNo tags attached.
Attached Files

- Relationships Relation Graph ] Dependency Graph ]

-  Notes
(0001782)
michiel (manager)
07-09-04 22:07

what version is that?
(0001783)
samos (reporter)
07-09-04 22:29
edited on: 07-09-04 22:30

Version 2.8.11

*edit sorry was wrong about version

edited on: 09-07-04 21:30
(0002330)
michiel (manager)
18-10-04 17:00

resolved in CVS


Copyright © 2000 - 2017 MantisBT Team
Powered by Mantis Bugtracker