Topic: | Guests can add comments to front page activities |
Severity: | Serious |
Versions affected: | < 2.0.4, < 2.1.1 (1.9.x not affected) |
Reported by: | Helen Foster |
Issue no.: | MDL-28503 |
Solution: | upgrade to 2.0.4 or 2.1.1 |
Workaround: | Don't enable comments for front page activities or use a comments block |
Description:
With this ability it was possible for users who were not logged in to post comments.