Opened 6 years ago

Closed 6 years ago

#1418 closed defect (fixed)

Paging potentially destroys data

Reported by: reto.kohli Owned by: comvation
Priority: must Milestone: Contrexx 3.1
Component: Core Version: 3.0.3
Severity: critical Keywords: paging store empty data


Many modules use GET parameters like "add", or "update" to trigger the respective function. The method Paging::get() produces URIs by cloning the current page address, then adds (or replaces) the parameters provided. Some modules (i.e. docsys) insufficiently verify posted data before storing it, thus causing entries to be overwritten with empty values each time the page is changed after such an operation. Besides fixing affected modules, Paging::get() should be changed, so as to only use the parameters provided, and not the current URI.

Change History (2)

comment:1 Changed 6 years ago by thomas.daeppen

  • Milestone changed from unknown to Contrexx 3.1

comment:2 Changed 6 years ago by kramer

  • Resolution set to fixed
  • Status changed from new to closed
Note: See TracTickets for help on using tickets.