Author Topic: Bug: participant id and cid mismatch allowed on View Participant page (Read 736 times)

jakecivi · May 30, 2012, 02:34:05 pm

civicrm/contact/view/participant?reset=1&id=64&cid=102&action=view

This returns a View Participant page with the wrong Participant Name and none of the associated contributions listed. There needs to be checking to make sure that the participant id matches the associated contact id.

General question about CiviCRM: Why, on pages like these, are the contact ID and the participant ID required in the URL? All the necessary information is in the participant record; requiring redundant information in a URL seems like begging for trouble.

Donald Lobo · May 30, 2012, 10:57:02 pm

hey jake:

any chance u can investigate and help fix the issue? Can you also check and make the same fix for contributions. Ping us on IRC if u need help getting started

Agreed about not sending in redundant parameters. If i had to guess, we were sending in the contact ID also since it was a sub-page of the contact view page and we use the contact view code to do permission checking

lobo

jakecivi · May 31, 2012, 10:19:47 am

I can help fix it. No guarantee of when, but I will post back what I discover..

I have a related question while I'm working on the View Participant page:
http://forum.civicrm.org/index.php/topic,24849.0.html

Thanks,
Jake

CiviCRM Community Forums (archive)

News:

Author Topic: Bug: participant id and cid mismatch allowed on View Participant page (Read 736 times)

jakecivi

Bug: participant id and cid mismatch allowed on View Participant page

Donald Lobo

Re: Bug: participant id and cid mismatch allowed on View Participant page

jakecivi

Re: Bug: participant id and cid mismatch allowed on View Participant page