View Issue Details
|ID||Project||Category||View Status||Date Submitted||Last Update|
|0001682||phpList 3 application||Authentication System||public||07-09-04 20:45||18-10-04 17:00|
|Fixed in Version||2.9.2|
|Summary||0001682: Unsubscribe does not requirer password|
|Description||Bug 0000642 made reference to this issue and was marked resolved. While it does work (asks for a password) when a user clicks on an unsubscription link that includes their 'uid' (http://www.mydomain.ca/lists/?p=unsubscribe&uid=a4f5854a687f828787c18e8ba8d1f717).|
If a user simply clicks the unsubscribe link on the main subscribe page (http://www.mydomain.com/lists/?p=unsubscribe) they are only prompted for the email address and are able to unsubscribe without ever being prompted for a password.
This makes requiering a password when a 'uid' is supplied completely ineffective.
I have the following related config parameters defined:
$require_login = 1;
|Tags||No tags attached.|