View Issue Details

WikiRelated ChangesetsJump to Notes
IDProjectCategoryView StatusDate SubmittedLast Update
0036990mantisbtuipublic2026-03-23 05:122026-03-23 08:32
Reporterninjasec Assigned Todregad  
PrioritynormalSeverityminorReproducibilityhave not tried
Status resolvedResolutionfixed 
Product Version2.1.0 
Target Version2.28.2Fixed in Version2.28.2 
Summary0036990: Duplicated layout in View Filters Page when filter is not accessible
Description

When opening view_filters_page.php with a filter_id parameter set to a non-existent filter or one that the user has no access to, an access denied page is shown.

Problem: the page header and sidebar are duplicated, as shown in attached screenshot

Steps To Reproduce

Open https://mantisbt.org/bugs/view_filters_page.php?filter_id=11

Additional Information

Originally reported by @ninjasec via Gitter (private chat).

Problem was introduced by commit MantisBT master b378aaaf (part of 0021935), which added the access_denied() call after layout_page_begin() was issued.

TagsNo tags attached.
Attached Files
screenshot.png (302,862 bytes)   
screenshot.png (302,862 bytes)   

Relationships

Relationship GraphDependency Graph
related to 0021935 closedcproensa Filter api refactoring, manage stored filters 

Activities

Related Changesets

MantisBT: master-2.28 996e4697

2026-03-23 08:26

dregad


Details Diff		 Fix duplicated page layout in view_filters_page.php

Issuing page layout too early causes header and sidebar duplication when
calling access_denied(), if the filter does not exist or is not
accessible.

Fixes 0036990		 Affected Issues
0036990
mod - view_filters_page.php Diff File