Sorry for the unconventional way to underline an already posted bug but I think is better here rather than posting about a bug in the forum (I tried irc several time but no one answered) http://www.mantisbt.org/bugs/view.php?id=14401
It is more than one year it is open even if a patch was provided.
The developer that is in charge is not answering to the note posted to the bug.
Since it is also security issue I think someone should work on it asap.
Sorry again to use a new bug in this way but I had no other way to put attention on it.
Just apply the patch if the patch is Ok for your installation.
The patch changes existing functionality. I am quite sure there are other users that want it the way it is at the moment.
