0010691: Missing form security token for delete button on manage_proj_ver_edit_page.php

ID	Project	Category	View Status	Date Submitted	Last Update
0010691	mantisbt	customization	public	2009-07-06 04:19	2013-07-17 10:29

Reporter	dhx	Assigned To	dhx
Priority	normal	Severity	minor	Reproducibility	have not tried
Status	closed	Resolution	fixed
Product Version	1.2.0rc1
Target Version	1.2.0rc2	Fixed in Version	1.2.0rc2

Summary	0010691: Missing form security token for delete button on manage_proj_ver_edit_page.php
Description	The CSRF token is expected by manage_proj_ver_delete.php but isn't provided in the form submitted via manage_proj_ver_edit_page.php
Tags	No tags attached.

MantisBT: master-1.2.x 831919e7 2009-07-06 04:21 dhx Details Diff	Fix 0010691: missing CSRF token for version delete		Affected Issues 0010691
	mod - manage_proj_ver_edit_page.php		Diff File

dhx 2009-07-06 04:42 reporter ~0022413	This one is OK for public release because it actually prevents anyone from deleting a version from a project and therefore can't be hacked :p