Affects Version/s: 2.3.3, 2.4
Fix Version/s: 2.5
Log in as a user and go to your messages. Search for yourself and your guest user. Check they dont appear in the users found section.
Search for another user. Check they appear in the users found section.
Affected Branches:MOODLE_23_STABLE, MOODLE_24_STABLE
Pull from Repository:
Pull Master Branch:
Pull Master Diff URL:
In the messaging, any user can search for the guest account, or even their account. From there they can:
- Add to contact list
- Block contact
- Send messages
I think we should prevent the users from finding and interacting with themselves and they guest account. This means that hacking the user specifying their own ID or the guest account's one should not work.
- Go to messaging
- Search for 'guest'
- Search for <yourname>
- You find the guest account and yourself and can interact.
- You don't find yourself or the guest account