Uploaded image for project: 'Moodle Community Sites'
  1. Moodle Community Sites
  2. MDLSITE-4056

User can delete anyones "My site" information

    XMLWordPrintable

    Details

      Description

      On moodle.org Plugins ► My sites ► Reports ► My sites by manuplating url param (id) you can delete anyones "My site" information

      Example the following information doesn't belong to me but I can delete it.

      https://moodle.org/plugins/report/user_sites/site.php?id=803&action=delete
      

        Attachments

          Issue Links

            Activity

              People

              • Votes:
                0 Vote for this issue
                Watchers:
                5 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: