webform_file_download query does not check that file is owned by Webform [#1283456]

Comment	File	Size	Author
#1	webform_file_download_is_nonsense.patch	1.07 KB	chx

	webform_file_download_is_nonsense.patch	2.45 KB	chx

Comment #1

chx CreditAttribution: chx commented 19 September 2011 at 02:47

File	Size
webform_file_download_is_nonsense.patch	1.07 KB

And so is the patch :D

Log in or register to post comments

Comment #2

chx CreditAttribution: chx commented 19 September 2011 at 03:17

Note that #1057252: Webform and private files is not indexable on MySQL, broken elsewhere contains this fix.

Log in or register to post comments

Comment #3

quicksketch

he/him

CreditAttribution: quicksketch commented 7 December 2011 at 04:12

Title:	webform_file_download query does not check for file	» webform_file_download query does not check that file is owned by Webform
Priority:	Critical	» Major

Finally committed.

Log in or register to post comments

Comment #4

quicksketch

he/him

CreditAttribution: quicksketch commented 7 December 2011 at 05:29

Status:

Needs review

» Fixed

Log in or register to post comments

Comment #5

ygerasimov CreditAttribution: ygerasimov commented 7 December 2011 at 22:17

Status:

Fixed

» Reviewed & tested by the community

Sorry but I can't see patch #1 committed. Please also be aware that patch is formed based on different path sites/all/modules/webform/webform.module and not module's root.

Manually applying patch solves the issue.