Download & Extend

Smartqueue_taxo may alter subqueues it doesn't own

Project:Nodequeue
Version:7.x-2.x-dev
Component:Code
Category:bug report
Priority:critical
Assigned:Unassigned
Status:closed (fixed)

Issue Summary

Problem: Smartqueue_taxonomy could accidentally update or delete the wrong subqueues when terms are updated or deleted. This might happen because the current SQL just searches for subqueues with a reference that equals the term ID. However, regular nodequeue subqueues store the queue id as the subqueue reference (and other smartqueue modules could store any arbitrary data as the reference). I marked this bug as critical due to the potential for data loss.

Solution: Make sure only smartqueue_taxonomy subqueues are deleted. Add WHERE owner = 'smartqueue_taxonomy' to queries.

AttachmentSizeStatusTest resultOperations
smartqueue-ownercheck.patch1.62 KBIgnored: Check issue status.NoneNone

Comments

#1

This looks good to me. I will review in more detail as soon as possible. Thanks for catching this!

#2

Status:needs review» fixed

Committed to Drupal 6 and 5 branches.

Thanks again!

#3

Status:fixed» closed (fixed)

Automatically closed -- issue fixed for two weeks with no activity.