View Issue Details

IDProjectCategoryView StatusLast Update
0001682phplist applicationAuthentication Systempublic18-10-04 17:00
Reportersamos 
PrioritynormalSeveritymajorReproducibilityalways
Status resolvedResolutionfixed 
Product Version 
Target VersionFixed in Version2.9.2 
Summary0001682: Unsubscribe does not requirer password
DescriptionBug 0000642 made reference to this issue and was marked resolved. While it does work (asks for a password) when a user clicks on an unsubscription link that includes their 'uid' (http://www.mydomain.ca/lists/?p=unsubscribe&uid=a4f5854a687f828787c18e8ba8d1f717).

If a user simply clicks the unsubscribe link on the main subscribe page (http://www.mydomain.com/lists/?p=unsubscribe) they are only prompted for the email address and are able to unsubscribe without ever being prompted for a password.

This makes requiering a password when a 'uid' is supplied completely ineffective.

I have the following related config parameters defined:

$require_login = 1;
define("ASKFORPASSWORD",1);
define("UNSUBSCRIBE_REQUIRES_PASSWORD",1);
TagsNo tags attached.

Activities

michiel

07-09-04 22:07

manager   ~0001782

what version is that?

samos

07-09-04 22:29

reporter   ~0001783

Last edited: 07-09-04 22:30

Version 2.8.11

*edit sorry was wrong about version

edited on: 09-07-04 21:30

michiel

18-10-04 17:00

manager   ~0002330

resolved in CVS