Bug #60989 [NEW]: logged in users can't access the security bugs reported by them

From: Date: Mon, 06 Feb 2012 11:24:46 +0000
Subject: Bug #60989 [NEW]: logged in users can't access the security bugs reported by them
Groups: php.webmaster 
Request: Send a blank email to php-webmaster+get-13026@lists.php.net to get a copy of this message
From: tyrael Operating system: PHP version: Irrelevant Package: Website problem Bug Type: Bug Bug description:logged in users can't access the security bugs reported by them Description: ------------ I just reported a few security issues, and noticed that: - anybody can access the basic information about the private/security bugs (summary, Submitted, Modified, From, Assigned, Status, Package, PHP version, OS, CVE-ID). - logged in users can't access the bug, they are still asked for a password, which they don't have, as they didn't had to provide that at the original report. - I'm not sure that it is a bug, or just a mail delivery issue, but when I tried to recover the password through the bug-pwd-finder.php, it said it was successful ("The password for bug report #60988 has been sent to tyrael@php.net"), but I didn't get any mail. -- Edit bug report at https://bugs.php.net/bug.php?id=60989&edit=1 -- Try a snapshot (PHP 5.4): https://bugs.php.net/fix.php?id=60989&r=trysnapshot54 Try a snapshot (PHP 5.3): https://bugs.php.net/fix.php?id=60989&r=trysnapshot53 Try a snapshot (trunk): https://bugs.php.net/fix.php?id=60989&r=trysnapshottrunk Fixed in SVN: https://bugs.php.net/fix.php?id=60989&r=fixed Fixed in SVN and need be documented: https://bugs.php.net/fix.php?id=60989&r=needdocs Fixed in release: https://bugs.php.net/fix.php?id=60989&r=alreadyfixed Need backtrace: https://bugs.php.net/fix.php?id=60989&r=needtrace Need Reproduce Script: https://bugs.php.net/fix.php?id=60989&r=needscript Try newer version: https://bugs.php.net/fix.php?id=60989&r=oldversion Not developer issue: https://bugs.php.net/fix.php?id=60989&r=support Expected behavior: https://bugs.php.net/fix.php?id=60989&r=notwrong Not enough info: https://bugs.php.net/fix.php?id=60989&r=notenoughinfo Submitted twice: https://bugs.php.net/fix.php?id=60989&r=submittedtwice register_globals: https://bugs.php.net/fix.php?id=60989&r=globals PHP 4 support discontinued: https://bugs.php.net/fix.php?id=60989&r=php4 Daylight Savings: https://bugs.php.net/fix.php?id=60989&r=dst IIS Stability: https://bugs.php.net/fix.php?id=60989&r=isapi Install GNU Sed: https://bugs.php.net/fix.php?id=60989&r=gnused Floating point limitations: https://bugs.php.net/fix.php?id=60989&r=float No Zend Extensions: https://bugs.php.net/fix.php?id=60989&r=nozend MySQL Configuration Error: https://bugs.php.net/fix.php?id=60989&r=mysqlcfg

« previous php.webmaster (#13026) next »