Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

dev/core#1918 - Remove dubious qfkey checking code that never runs #18007

Merged
merged 1 commit into from
Jul 31, 2020

Conversation

demeritcowboy
Copy link
Contributor

Overview

https://lab.civicrm.org/dev/core/-/issues/1918

This function has had a typo that caused the whole block except the last line to never get executed ever in the 10 years since it was added. If it was meant as security it's not secure, so have decided to remove it in the interest of simplicity. It would be just as easy to fix, but seems to have limited value to me if it hasn't run in 10 years and has no security purpose.

Technical Details

It generates an E_NOTICE because the strpos params are backwards, but it gets hidden.

@civibot
Copy link

civibot bot commented Jul 30, 2020

(Standard links)

@civibot civibot bot added the master label Jul 30, 2020
@demeritcowboy demeritcowboy changed the title dev/core#1918 - Remove dubious code qfkey checking that never runs dev/core#1918 - Remove dubious qfkey checking code that never runs Jul 30, 2020
@eileenmcnaughton
Copy link
Contributor

I agree with your analysis.
OK without test since you can test something that does nothing & is being removed

@eileenmcnaughton eileenmcnaughton merged commit 640866c into civicrm:master Jul 31, 2020
@demeritcowboy
Copy link
Contributor Author

Thanks!

@demeritcowboy demeritcowboy deleted the strpos-revisited branch July 31, 2020 03:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants