0001119: Administrative actions should be done with POST instead of with GET - PacketFence - BTS

Bug Tracking System

View Issue Details [ Jump to Notes ]

[ Issue History ] [ Print ]

ID

Project

Category

View Status

Date Submitted

Last Update

0001119

PacketFence

web admin

public

2010-11-17 10:06

2011-10-25 09:06

Reporter

obilodeau

Assigned To

obilodeau

Priority

high

Severity

tweak

Reproducibility

always

Status

closed

Resolution

fixed

Platform

OS

OS Version

Product Version

Target Version

3.0.0

Fixed in Version

3.0.0

Summary

0001119: Administrative actions should be done with POST instead of with GET

Description

Would avoid an issue we encountered where a browser tab set to auto-refresh was restarting the service in loop because the URI was: "services.php?service=pfsetvlan&action=restart".

Putting the information in a POST would avoid non-malicious instances of this.

Tags

No tags attached.

fixed in git revision

fixed in mtn revision

5bbf3063f919b3ef4ec815ee30e5557979d0326d

Relationships

Notes
(0002260) obilodeau (reporter) 2011-09-21 22:15	fix released in 3.0

Issue History
Date Modified	Username	Field	Change
2010-11-17 10:06	obilodeau	New Issue
2010-11-19 14:26	obilodeau	Target Version	1.10.1 => 2.1.0
2011-03-03 15:16	obilodeau	Target Version	2.1.0 => +1
2011-03-03 15:18	obilodeau	Target Version	+1 => +2
2011-09-07 11:39	obilodeau	Status	new => assigned
2011-09-07 11:39	obilodeau	Assigned To	=> obilodeau
2011-09-07 13:25	obilodeau	mtn revision	=> 5bbf3063f919b3ef4ec815ee30e5557979d0326d
2011-09-07 13:25	obilodeau	Status	assigned => resolved
2011-09-07 13:25	obilodeau	Fixed in Version	=> trunk
2011-09-07 13:25	obilodeau	Resolution	open => fixed
2011-09-21 22:07	obilodeau	Fixed in Version	trunk => 3.0.0
2011-09-21 22:15	obilodeau	Note Added: 0002260
2011-09-21 22:16	obilodeau	Status	resolved => closed
2011-10-25 09:06	obilodeau	Target Version	+2 => 3.0.0

Copyright © 2000 - 2012 MantisBT Group