[buddypress-trac] [BuddyPress Trac] #6504: Messages viewable to any logged out visitor

buddypress-trac noreply at wordpress.org
Tue Jun 16 22:48:12 UTC 2015

#6504: Messages viewable to any logged out visitor
 Reporter:  CodeMonkeyBanana       |       Owner:  johnjamesjacoby
     Type:  defect (bug)           |      Status:  closed
 Priority:  normal                 |   Milestone:  2.3.2
Component:  Component - Messaging  |     Version:
 Severity:  blocker                |  Resolution:  fixed
 Keywords:  has-patch 2nd-opinion  |
Changes (by johnjamesjacoby):

 * owner:   => johnjamesjacoby
 * status:  new => closed
 * resolution:   => fixed


 In [changeset:"9948"]:
 #!CommitTicketReference repository="" revision="9948"
 Messages: Introduce filter to enforce private message thread query

 This change ensures that all queries for private messages will always
 return anticipated results, even when certain malformed values are passed
 in. It specifically hardens the user ID argument to prevent accidental

 Fixes #6504. Props r-a-y. (trunk, for 2.4.0)

Ticket URL: <https://buddypress.trac.wordpress.org/ticket/6504#comment:18>
BuddyPress Trac <http://buddypress.org/>
BuddyPress Trac

More information about the buddypress-trac mailing list