Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-45640

User can block messages from self

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Minor
    • Resolution: Cannot Reproduce
    • Affects Version/s: 2.4.10, 2.7
    • Fix Version/s: None
    • Component/s: Messages
    • Labels:
    • Testing Instructions:
      Hide
      • Click in My profile > Messages.
      • Search and add a user to you contact list.
      • Click on Block contact link, or in the block icon.
      • Change blockcontact URL parameter to your own user ID.
      • Make sure you receive a error message like this and your user is not blocked.

        You can't block yourself.
        

      Show
      Click in My profile > Messages. Search and add a user to you contact list. Click on Block contact link, or in the block icon. Change blockcontact URL parameter to your own user ID. Make sure you receive a error message like this and your user is not blocked. You can't block yourself.
    • Difficulty:
      Easy
    • Affected Branches:
      MOODLE_24_STABLE, MOODLE_27_STABLE
    • Pull from Repository:
    • Pull Master Branch:
      MDL-45640-master

      Description

      It is possible to send messages to yourself by manually setting the "id" or "user2" parameters to your own user ID on the "/messages/index.php" page.

      From here it is also possible to add yourself as a contact, or to block communication from yourself.

      Steps to reproduce:

      • Login to Moodle
      • Find your own user ID from the profile link in the top right
      • Manually browse to "/message/index.php?user2=<<YOURID>>
      • Click the "Block Contact" link

      Expected outcome:

      • Links should not be visible, or should give error when attempting to block/add self

      Actual outcome:

      • It is possible to add self as contact or block communication from self.

      Only tested on 2.4.10 and 2.7, but likely to affect intermediate versions as well.

        Attachments

          Issue Links

            Activity

              People

              • Votes:
                1 Vote for this issue
                Watchers:
                6 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: