Uploaded image for project: 'Moodle Community Sites'
  1. Moodle Community Sites
  2. MDLSITE-4056

User can delete anyones "My site" information

    XMLWordPrintable

    Details

      Description

      On moodle.org Plugins ► My sites ► Reports ► My sites by manuplating url param (id) you can delete anyones "My site" information

      Example the following information doesn't belong to me but I can delete it.

      https://moodle.org/plugins/report/user_sites/site.php?id=803&action=delete
      

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              mudrd8mz David Mudrák (@mudrd8mz)
              Reporter:
              rajeshtaneja Rajesh Taneja
              Participants:
              Component watchers:
              David Mudrák (@mudrd8mz)
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: