derpunker Posted May 6 Share Posted May 6 (edited) Dear IPS support, I have found a bug in context of the attachment claiming. IPS 4.7.9 installed, all hooks disabled. ------- Repro steps: Login with user 1 (user) Create a new topic Add an attachment, for example a picture, to the post Leaf the title empty Try to save the new topic => Error, because of missing field (Topic should not be saved) Logout user 1 (user) Login with user 2 (root) Create a new topic (same forum as before) Add an attachment, for example a picture, to the post Leaf the title empty Try to save the new topic => Error, because of missing field Fill in a title Save the new topic Result: The topic iteself is created correct In the activity stream the post is displayed wrong! The picture of user 1 is assigned to the post of user 2. Technical analyze: The temp key in core_attachments_map is a md5 hash based on the same input string. The string is more or less constant for a forum and doesn't contain a session or user id. The two screenrecording are showing the bug. Scenario with 2 pictures 2023-05-06 19-49-34.mp4 Scenarion with only one picture 2023-05-06 19-58-05.mp4 Please have a look with high priority. My community has already many posts with inconsistant attachments 😥 Edited May 6 by derpunker Link to comment Share on other sites More sharing options...
Jim M Posted May 8 Share Posted May 8 Are you stating that this happens with other users in real life terms? I.E., not logging in/out of accounts on the same machine. Link to comment Share on other sites More sharing options...
derpunker Posted May 8 Author Share Posted May 8 Yes, this happens with different users in real life too. We have observed this bug a couple of times in our community with normal user accounts and it took some time to understand the scenario. In this video a VM and the Host itself is used. Please ignore the license warning, this is only because of not using localhost. 2023-05-08 22-28-42.mp4 The repros steps are really simple, please try it out by yourself @Jim M Link to comment Share on other sites More sharing options...
Jim M Posted May 8 Share Posted May 8 Please be advised I have tagged a developer to review your claims here. Link to comment Share on other sites More sharing options...
derpunker Posted May 8 Author Share Posted May 8 (edited) Reproduced in your live community. 2023-05-08 22-46-49.mp4 @Jim M Edited May 8 by derpunker G17 Media 1 Link to comment Share on other sites More sharing options...
derpunker Posted May 12 Author Share Posted May 12 Any feedback so far? G17 Media 1 Link to comment Share on other sites More sharing options...
Marc Stridgen Posted May 15 Share Posted May 15 Thank you for bringing this issue to our attention! I can confirm this should be further reviewed and I have logged an internal bug report for our development team to investigate and address as necessary, in a future maintenance release. Link to comment Share on other sites More sharing options...
Recommended Posts