-
Bug
-
Resolution: Cannot Reproduce
-
Minor
-
None
-
2.4.10, 2.7
-
MOODLE_24_STABLE, MOODLE_27_STABLE
-
MDL-45640-master -
Easy
-
It is possible to send messages to yourself by manually setting the "id" or "user2" parameters to your own user ID on the "/messages/index.php" page.
From here it is also possible to add yourself as a contact, or to block communication from yourself.
Steps to reproduce:
- Login to Moodle
- Find your own user ID from the profile link in the top right
- Manually browse to "/message/index.php?user2=<<YOURID>>
- Click the "Block Contact" link
Expected outcome:
- Links should not be visible, or should give error when attempting to block/add self
Actual outcome:
- It is possible to add self as contact or block communication from self.
Only tested on 2.4.10 and 2.7, but likely to affect intermediate versions as well.
- has a non-specific relationship to
-
MDL-37164 Messaging: prevent users from interacting with themselves and guest user
-
- Closed
-