Other users' mail addresses are revokable.

[nayuki]

jisko v2.0

1.My mail address is changed.

2.URL of the mail that has been sent is put on the message.

3.When the person who is logging it in clicks the URL, the mail address of the person who clicked is changed.

Stop-gap measure
settings.php
 case 'config':
  if ($_GET['uid'] && $_GET['key']) {
   $check = $db->checkEmailKey($_GET['key'], $_GET['uid']);
   if ($check) {
    $newEmail = $db->getEmailFromKey($_GET['key'], $_GET['uid']);
    $_USER['email'] = $newEmail;
    $db->updateMail($_USER['ID'], $newEmail);
    echo showStatus(__('Email changed!'), 'ok');
   }
  }
------------------------------------------------------------------------------------------------------------------
 case 'config':
  if ($_GET['uid'] && $_GET['key']) {
   $check = $db->checkEmailKey($_GET['key'], $_GET['uid']);
   if ($check) {
    $newEmail = $db->getEmailFromKey($_GET['key'], $_GET['uid']);
    $_USER['email'] = $newEmail;
    $db->updateMail($_GET['uid'], $newEmail);//Change part
    $db->deleteKey($_GET['key'], $_GET['uid']);//Addition
    echo showStatus(__('Email changed!'), 'ok');
   }
  }

[Marcos Garcia (marcosgdf)]

Fixed in last revision.

Sorry about this problem, and thanks for reporting and making Jisko better!

Regards, Marquitox.

[nayuki (kaji)]

If here is mended and not put, e-mail of the person who clicked first is changed.

$db->updateMail($_USER['ID'], $newEmail);

$db->updateMail($_GET['uid'], $newEmail);

[Marcos Garcia (marcosgdf)]

Well...
I have to admit that the way Jisko confirms an email it's no the best way so
maybe it will change in Jisko 3.0 and not in 2.0.

Anyway, thanks for your interest in Jisko :)

El 29/01/2010 1:05, "nayuki" <email address hidden> escribió:

If here is mended and not put, e-mail of the person who clicked first is
changed.

$db->updateMail($_USER['ID'], $newEmail);

$db->updateMail($_GET['uid'], $newEmail);

--
Other users' mail addresses are revokable.
https://bugs.launchpad.net/bugs/514071
You received this bug notification because you are a bug assignee.