Uploaded image for project: 'PUBLIC - Liferay Portal Community Edition'
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-18522

Able to insert new portlet instance into Liferay portletpreferences table by passing dummy portlet instance through p_p_id parameter url

    Details

    • Branch Version/s:
      6.0.x
    • Backported to Branch:
      Committed

      Description

      When using any instanceable portlet, and one adds an additional parameter and value to the URL,the database continues to produce an additional instance portlet row when viewing the portletpreference table in DB.

      In other words, one can add a "dummy" instance portlet row via the URL and continually produce portlet instances in the database without really adding to the page.

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              sophia.zhang Sophia Zhang
              Reporter:
              ira.chui Ira Chui
              Participants of an Issue:
              Recent user:
              Brian Wulbern
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:
                Days since last comment:
                9 years, 3 days ago

                  Packages

                  Version Package
                  6.0.12 EE
                  6.1.0 CE RC1