[commits] Horde branch master updated. ac22a6e2d2a9797eb4b378882194af1025b03d00
Michael Rubinsky
mike at theupstairsroom.com
Sun Aug 15 18:09:53 UTC 2010
The branch "master" has been updated.
The following is a summary of the commits.
from: e7947050858afa54c06d920696871e7d8d0ef999
71a637d fix scope
ac22a6e Hotfix for issue that prevents form submissions due to sessions being cleared.
-----------------------------------------------------------------------
commit 71a637d8c66ac8829c0e717e2babbcbae4baa4a5
Author: Michael J. Rubinsky <mrubinsk at horde.org>
Date: Sun Aug 15 12:18:28 2010 -0400
fix scope
whups/lib/Whups.php | 4 ++--
1 files changed, 2 insertions(+), 2 deletions(-)
http://git.horde.org/diff.php/whups/lib/Whups.php?rt=horde-git&r1=1cecd5d8a0a787eeedf60a26ce38d960bb3e06cd&r2=71a637d8c66ac8829c0e717e2babbcbae4baa4a5
-----------------------------------------------------------------------
commit ac22a6e2d2a9797eb4b378882194af1025b03d00
Author: Michael J. Rubinsky <mrubinsk at horde.org>
Date: Sun Aug 15 14:05:12 2010 -0400
Hotfix for issue that prevents form submissions due to sessions being cleared.
If submitting a form as guest, the secret tokens and captchas etc... are cleared from the session
during the check for transparent authentication. Assume that if this form is submitted, the user
was already authenticated (or did not require authentication).
As mentioned, this is a hotfix meant to get bugs.horde.org working again for guests.
There is probably a more appropriate way to fix this, but I cannot think of any other fixes that do not
open up other security holes.
framework/Core/lib/Horde/Registry.php | 8 ++++----
whups/ticket/comment.php | 8 +++++++-
2 files changed, 11 insertions(+), 5 deletions(-)
http://git.horde.org/diff.php/framework/Core/lib/Horde/Registry.php?rt=horde-git&r1=1cecd5d8a0a787eeedf60a26ce38d960bb3e06cd&r2=ac22a6e2d2a9797eb4b378882194af1025b03d00
http://git.horde.org/diff.php/whups/ticket/comment.php?rt=horde-git&r1=4343b7a9079e436ff77770deb9adb6b1f38cc29c&r2=ac22a6e2d2a9797eb4b378882194af1025b03d00
More information about the commits
mailing list