---- Reported by gmcharlt@gmail.com 2010-05-17 12:51:02 ---- serials/reorder_members.pl does not do an authentication check, thus allowing somebody to construct a URL to manipulate the order of members in a serials routing list without authorization. ---- Additional Comments From colin.campbell@ptfs-europe.com 2010-05-19 09:27:12 ---- Created an attachment Oroposed patch --- Bug imported by chris@bigballofwax.co.nz 2010-05-21 01:28 UTC --- This bug was previously known as _bug_ 4517 at http://bugs.koha.org/cgi-bin/bugzilla3/show_bug.cgi?id=4517 Imported an attachment (id=2137) Actual time not defined. Setting to 0.0 Setting qa contact to the default for this product. This bug either had no qa contact or an invalid one. The original submitter of attachment 2137 [details] [review] is unknown. Reassigning to the person who moved it here: chris@bigballofwax.co.nz.
Pushed patch.