Registered user's nicknames protection missing
petiar - April 7, 2008 - 21:44
| Project: | Guestbook |
| Version: | 6.x-2.x-dev |
| Component: | Code |
| Category: | feature request |
| Priority: | normal |
| Assigned: | Unassigned |
| Status: | needs review |
Description
Hi,
thanks for great module. RC1 looks fine apart from the fact that anonymous can use the nickname of any of the registered users. I think this should not be allowed, what do you think?
If you are aware of this or even working on this, accept my apologies and ignore/delete this issue.
Thanks,
Petiar.
#1
How does Drupal core handle this? Patches are welcome.
#2
I have no idea how Drupal core handle this, do you think it is its responsibility?
However, I'll have a look into the Guestbook code and see what can I do - it should not be complicated to implement this check.
Thanks,
Peter.
#3
Please make sure that Comment module in Drupal core does not already implement a working solution. If it does, we'll probably fork that functionality directly from there, so any improvements to Comment module's functionality can be added to Guestbook's.
#4
Reclassifying.
#5
Attach patch is against CVS HEAD (6.x-2.x). Please test.