Bugzilla – Attachment 95582 Details for
Bug 23634
Privilege escalation vulnerability for staff users with 'edit_borrowers' permission and 'OpacResetPassword' enabled
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
[patch]
Bug 23634: (follow-up) Prevent updates on POST
Bug-23634-follow-up-Prevent-updates-on-POST.patch (text/plain), 946 bytes, created by
Martin Renvoize (ashimema)
on 2019-11-19 17:00:18 UTC
(
hide
)
Description:
Bug 23634: (follow-up) Prevent updates on POST
Filename:
MIME Type:
Creator:
Martin Renvoize (ashimema)
Created:
2019-11-19 17:00:18 UTC
Size:
946 bytes
patch
obsolete
>From 163dd2c4c8fa95fe037e512182e8a469cb5c11ad Mon Sep 17 00:00:00 2001 >From: Martin Renvoize <martin.renvoize@ptfs-europe.com> >Date: Tue, 19 Nov 2019 16:59:06 +0000 >Subject: [PATCH] Bug 23634: (follow-up) Prevent updates on POST > >--- > members/memberentry.pl | 6 ++++++ > 1 file changed, 6 insertions(+) > >diff --git a/members/memberentry.pl b/members/memberentry.pl >index 2d04516923..0efc7642c9 100755 >--- a/members/memberentry.pl >+++ b/members/memberentry.pl >@@ -527,6 +527,12 @@ if ((!$nok) and $nodouble and ($op eq 'insert' or $op eq 'save')){ > delete $newdata{'userid'}; > } > >+ if ($NoUpdateEmail) { >+ delete $newdata{'email'}; >+ delete $newdata{'emailpro'}; >+ delete $newdata{'B_email'}; >+ } >+ > my $patron = Koha::Patrons->find( $borrowernumber ); > $newdata{debarredcomment} = $newdata{debarred_comment}; > delete $newdata{debarred_comment}; >-- >2.20.1
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
|
Splinter Review
Attachments on
bug 23634
:
92932
|
92998
|
95563
|
95564
|
95574
|
95575
|
95576
|
95577
|
95582
|
97986
|
97987
|
97988
|
97989
|
97990
|
106159
|
106160
|
106161
|
106162
|
106163
|
106723
|
106724
|
106725
|
106726
|
106727
|
106764
|
106826
|
106837
|
106838
|
106839
|
106840
|
106841
|
106842
|
106843
|
106844
|
106979
|
106980
|
106981
|
106982
|
106983
|
106984
|
106985
|
106986
|
109582