[buddypress-trac] [BuddyPress Trac] #7683: friends_add_friend doesnt check if user ids exist

buddypress-trac noreply at wordpress.org
Mon Feb 5 21:21:58 UTC 2018


#7683: friends_add_friend doesnt check if user ids exist
--------------------------+------------------------------
 Reporter:  modemlooper   |       Owner:
     Type:  defect (bug)  |      Status:  new
 Priority:  normal        |   Milestone:  Awaiting Review
Component:  Friends       |     Version:  2.9.2
 Severity:  normal        |  Resolution:
 Keywords:                |
--------------------------+------------------------------

Comment (by modemlooper):

 I saw other functions do not check ids, so I can go into the html changed
 the id to anything and then BP js will add the wrong user id without
 checking. Look at my attachment.

--
Ticket URL: <https://buddypress.trac.wordpress.org/ticket/7683#comment:7>
BuddyPress Trac <http://buddypress.org/>
BuddyPress Trac


More information about the buddypress-trac mailing list