BUG: Email gets lost in profile.php BUG: Email gets lost in profile.php
 

News:

cpg1.5.48 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.
[more]

Main Menu

BUG: Email gets lost in profile.php

Started by bnies, December 12, 2005, 09:26:08 AM

Previous topic - Next topic

0 Members and 3 Guests are viewing this topic.

bnies

Version: Coppermine 1.4.2

Problem Description: If the user option "Allow users to change their email address in profile" is set to "no" and the user opens profile.php and clicks "apply modification" the email address gets deleted in the MySQL database.

Cause: In the HTML form an appropriate hidden input type tag is missing.

Fix: In profile.php in function make_form() in the switch statement replace the case 'text' as follows:

        case 'text' :
            if ($form_data[$element[1]] == '') break;
            echo <<<EOT
    <tr>
        <td width="40%" class="tableb" height="25">
            {$element[2]}
        </td>
        <td width="60%" class="tableb">
            {$form_data[$element[1]]}
        </td>
    </tr>
    <input type="hidden" name="{$element[1]}" value="{$form_data[$element[1]]}">
EOT;


Nibbler


yeomanjake

Quote from: Nibbler on December 15, 2005, 07:54:36 PM
Fix committed to CVS.

Hello, I am using v1.3.2. and thank you for this fix; I do have a question, however, in Profiles.. Is there a way to get a User's name in a Profile to have a mailto: link (Email) so a person can send a message to a photo contributor?
please send reply to kenjaccard@bellsouth.net - thanks

Ken Jaccard
---------------------------------------------------------------------------------------
Come Visit a Premier Naval History Website and live the adventure!
Jake’s ‘Yankee Station’ - U.S.S. Hancock CV/CVA-19 Memorial
http://www.usshancockcv19.com .

Joachim Müller

this is the cpg1.4.x bugs board. No support is given here, particularly not for cpg1.3.x. Thread locked.