Opened 1 year ago

Last updated 1 year ago

Output before header() gives visitors admin rights (Ticket #179)

Reported by eigan
Assigned to
Type Defect
Priority High
Severity Critical
Component Core
Milestone 2.0
Version 0.4
Status Invalid
Percent

Description

If you have error reporting with notice in apache, will header()-redirect fail to work because there is some notice errors before header().

Scenario: You are not logged in, then going to the admincp – the header() will now try to redirect you to login, but fails because of the notice errors. The rest of the page will now render like you where logged in and show you some info like users and some settings, and you can create users/projects/milestones etc(!), (havent looked so much at it).

Attachments

Ticket History

1 year and 9 months ago by Jack

  • Closed ticket as Invalid

I’ve not been able to reproduce this, did you maybe setup the config.php file wrong?.

1 year and 9 months ago by eigan

  • Opened Ticket