[Koha-bugs] [Bug 3280] opac/opac-sendbasket.pl security leaky

[bugzilla-daemon at bugs.koha-community.org]

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=3280

--- Comment #7 from M. de Rooy <m.de.rooy at rijksmuseum.nl> ---
(In reply to comment #6)
> Hi Marcel, not sure that was Kyle - there is bug 4274 for the problem. It
> used to be possible for not logged in users to mail the cart (I know it was
> in 3.2.x). Then it got changed some time after that. Now it requires you to
> log in before you can send items from the cart.

It is still possible in master. I just did ??

-- 
You are receiving this mail because:
You are the QA Contact for the bug.
You are watching all bug changes.