Loading...
 
Skip to main content

CSRF on using module error messages

Status
Closed
Subject
CSRF on using module error messages
Version
19.x
Category
  • Bug
Feature
Modules
Resolution status
Fixed or Solved
Submitted by
Jean-Marc Libs
Volunteered to solve
Fabio Montefuscolo
Lastmod by
Jean-Marc Libs
Rating
(0)
Related-to
Description

When I create a new site and I add the switch_themes module, it does not show up. Instead, I get a "Module error" box (see picture 01) which tells me I need to activate the "users can change theme" feature.
So far, so good (except for the weird placement of the box in the bottom but that's off topic here).

When I check this "users can change theme" feature in the "Module error" box and save, I get a CSRF error and nothing is actually done 😑
That's the issue I report
See picture 02

Files
  1. Screenshot 20181121 CSRF 01 Trigger
  2. Screenshot 20181121 CSRF 02
Importance
8
Priority
40
Demonstrate Bug on Tiki 19+
Demonstrate Bug (older Tiki versions)
Ticket ID
6941
Created
Wednesday 21 November, 2018 16:27:20 UTC
by Jean-Marc Libs
LastModif
Saturday 06 July, 2024 10:21:44 UTC


Show PHP error messages