It is currently possible to set the anonymous user and the default front page fields to ''. Neither should be possible.

-K

CommentFileSizeAuthor
anon-required.patch1.24 KBZen

Comments

Freso’s picture

Freso commented
Status: Needs review » Needs work

Technical problems:

  1. gentoo-vm drupal6 # patch -p0 < anon-required.patch
    patching file modules/system/system.module
    Hunk #1 FAILED at 599.
    Hunk #2 FAILED at 608.
    2 out of 2 hunks FAILED -- saving rejects to file modules/system/system.module.rej
  2. Per the coding standards, the last element of the arrays should still be followed by a comma. (I know that it wasn't already, but that might as well be fixed along with this patch. :))

Also, I don't think we can stop anyone from specifying something like:

$conf = array(
  'anonymous' => '',
  'site_frontpage' => '',
);

in settings.php, so perhaps it would be a good idea to have some default options to fall back to in case of $conf[...] = ''?

pancho’s picture

pancho
Location UTC+2 🇪🇺 EU
commented
Priority: Minor » Normal
Status: Needs work » Fixed

Has already been fixed in #201540

Freso’s picture

Freso commented
Status: Fixed » Closed (duplicate)

If it was fixed in another bug, it should probably be marked as a duplicate of this. I do find that my concerns have not been answered in the other (newer) bug, so I guess I'll have to post them again.