derpunker Posted May 6, 2023 Posted May 6, 2023 (edited) Dear IPS support, I have found a bug in context of the attachment claiming. IPS 4.7.9 installed, all hooks disabled.  ------- Repro steps: Login with user 1 (user) Create a new topic Add an attachment, for example a picture, to the post Leaf the title empty Try to save the new topic => Error, because of missing field (Topic should not be saved) Logout user 1 (user) Login with user 2 (root) Create a new topic (same forum as before) Add an attachment, for example a picture, to the post Leaf the title empty Try to save the new topic => Error, because of missing field Fill in a title Save the new topic Result: The topic iteself is created correct In the activity stream the post is displayed wrong! The picture of user 1 is assigned to the post of user 2.  Technical analyze: The temp key in core_attachments_map is a md5 hash based on the same input string. The string is more or less constant for a forum and doesn't contain a session or user id.   The two screenrecording are showing the bug. Scenario with 2 pictures 2023-05-06 19-49-34.mp4  Scenarion with only one picture 2023-05-06 19-58-05.mp4  Please have a look with high priority. My community has already many posts with inconsistant attachments 😥    Edited May 6, 2023 by derpunker
Jim M Posted May 8, 2023 Posted May 8, 2023 Are you stating that this happens with other users in real life terms? I.E., not logging in/out of accounts on the same machine.
derpunker Posted May 8, 2023 Author Posted May 8, 2023 Yes, this happens with different users in real life too. We have observed this bug a couple of times in our community with normal user accounts and it took some time to understand the scenario. Â In this video a VM and the Host itself is used. Please ignore the license warning, this is only because of not using localhost. Â 2023-05-08 22-28-42.mp4 Â The repros steps are really simple, please try it out by yourself @Jim M
Jim M Posted May 8, 2023 Posted May 8, 2023 Please be advised I have tagged a developer to review your claims here.
derpunker Posted May 8, 2023 Author Posted May 8, 2023 (edited) Reproduced in your live community. 2023-05-08 22-46-49.mp4 Â @Jim M Edited May 8, 2023 by derpunker G17 Media 1
Marc Posted May 15, 2023 Posted May 15, 2023 Thank you for bringing this issue to our attention! I can confirm this should be further reviewed and I have logged an internal bug report for our development team to investigate and address as necessary, in a future maintenance release. Â
derpunker Posted June 7, 2023 Author Posted June 7, 2023 Will this issue be fixed with release 4.7.11?
Marc Posted June 8, 2023 Posted June 8, 2023 We have taken a look at this, and its quite an involved fix which would need to be done in a major release. We do have this noted to be resolved at that point, but its not something you are going to see any time in minor releases like this.Â
derpunker Posted June 8, 2023 Author Posted June 8, 2023 That was not the answer I was hoping for. 🤒 Can you please give an estimate when to expect a resolution? The error is really annoying and we have to check every new topic manually for wrong attachments.
Marc Posted June 8, 2023 Posted June 8, 2023 5 minutes ago, derpunker said: That was not the answer I was hoping for. 🤒 Can you please give an estimate when to expect a resolution? The error is really annoying and we have to check every new topic manually for wrong attachments. Im unable to give an estimate at present, other than to say it will be something addressed in a major release.
Recommended Posts