View Issue Details

IDProjectCategoryView StatusLast Update
0022335mantisbtdocumentationpublic2017-03-12 19:23
Reporterkewlguy Assigned Toatrol  
PrioritynormalSeverityminorReproducibilityalways
Status closedResolutionfixed 
Product Version1.3.0-beta.1 
Target Version1.3.7Fixed in Version1.3.7 
Summary0022335: Wrong documentation of $g_limit_email_domains in Admin Guide
Description

2.1 doesnt restrict based on the setup variable of "limit_email_domain". When registering, it let me put the email outside of the limit email domain setting.

Steps To Reproduce

add $g_limit_email_domain to config_inc.php
Register for new user with email outside of that limit email domain setting
observe

Additional Information

This is our highest security concern.

TagsNo tags attached.

Activities

atrol

atrol

2017-02-07 16:50

developer   ~0055564

Last edited: 2017-02-07 17:02

Didn't try, but this might be a documentation issue.
The right name of the option is $g_limit_email_domains
and can contain multiple domains, e.g.
$g_limit_email_domains = array( 'users.sourceforge.net', 'sourceforge.net' );

kewlguy

kewlguy

2017-02-07 17:07

reporter   ~0055565

That one work. The documentation need to be updated.

kewlguy

kewlguy

2017-02-07 17:09

reporter   ~0055566

One thing i noticed, in the older version it will instruct to enter "username" and the email domain is added automatically. This is no longer true with 2.1 (It will return error saying its not valid instead)

atrol

atrol

2017-02-07 17:10

developer   ~0055567

PR https://github.com/mantisbt/mantisbt/pull/1020

atrol

atrol

2017-02-07 17:20

developer   ~0055568

in the older version it will instruct to enter "username" and the email domain is added automatically.

I don't understand what you want to tell with this.
How should Mantis know any email domain which can be added automatically?
Maybe this happens because your browser automatically fills fields based on previous inputs.

Related Changesets

MantisBT: master-1.3.x 8fdd8434

2017-02-07 12:06

atrol


Details Diff
Correct documentation of option limit_email_domains

Fixes 0022335
Affected Issues
0022335
mod - docbook/Admin_Guide/en-US/config/email.xml Diff File