CSRF on using module error messages
- Status
- Closed
- Subject
- CSRF on using module error messages
- Version
- 19.x
- Category
- Bug
- Feature
- Modules
- Resolution status
- Fixed or Solved
- Submitted by
- Jean-Marc Libs
- Volunteered to solve
- Fabio Montefuscolo
- Lastmod by
- Jean-Marc Libs
- Rating
- Related-to
- Description
When I create a new site and I add the switch_themes module, it does not show up. Instead, I get a "Module error" box (see picture 01) which tells me I need to activate the "users can change theme" feature.
So far, so good (except for the weird placement of the box in the bottom but that's off topic here).When I check this "users can change theme" feature in the "Module error" box and save, I get a CSRF error and nothing is actually done
That's the issue I report
See picture 02- Importance
- 8
- Priority
- 40
- Demonstrate Bug (Tiki 19+)
-
This bug has been demonstrated on show2.tiki.org
Please demonstrate your bug on show2.tiki.org
Version: Create show2.tiki.org instanceAbout show2.tiki.orgTo help developers solve the bug, we kindly request that you demonstrate your bug on a show2.tiki.org instance. To start, simply select a version and click on "Create show2.tiki.org instance". Once the instance is ready (in a minute or two), as indicated in the status window below, you can then access that instance, login (the initial admin username/password is "admin") and configure the Tiki to demonstrate your bug. Priority will be given to bugs that have been demonstrated on show2.tiki.org.
- Ticket ID
- 6941
- Created
- Wednesday 21 November, 2018 16:27:20 GMT-0000
by Jean-Marc Libs - LastModif
- Monday 06 April, 2020 13:09:25 GMT-0000
;){kind=link}
;){kind=link}
- Feature request: Be able to exclude (by category) the pages listed in Latest Changes module
- Add a command to console.php to invalidate certain objects in the search index
- Counting items in Items List Doesn't Work due to lack of , between items
- Modals in Quartz theme are too narrow
- Tracker Currency Field not working
;){kind=link}
;){kind=link}