Skip to content
Snippets Groups Projects
  1. Feb 12, 2018
    • JediKev's avatar
      oops: Prevent Account Takeover · be0133b0
      JediKev authored
      This addresses an issue where someone can “takeover” an account with only
      a User’s email and a User’s previous ticket number. Once they get access
      to a User’s ticket they can go to the Ticket Owner’s profile and change
      the email to whatever they’d like. This adds a check on the profile to see
      if the User is a Guest User. If they are a Guest then it kicks them back
      to the ticket view. If they are the actual User it will let them view the
      profile.
      be0133b0
  2. Mar 20, 2014
  3. Jan 20, 2014
Loading