1. Summary
  2. Files
  3. Support
  4. Report Spam
  5. Create account
  6. Log in

Ticket #15546 (closed: wontfix)

Opened 3 years ago

Last modified 23 months ago

sendmessage.php fails ungracefully on missing fields

Reported by: gene_wood Owned by: ctsai
Keywords: ENGR NF-1653 Cc:
Private: no

Description

The Send Message facility which you can find at this URL :

https://sourceforge.net/sendmessage.php?touser=1234

reacts poorly to missing fields. If you type in a message and forget to enter a subject in the subject field, the page responds with :

There was an error processing your request ...
Error - Missing Params
ERROR - Missing Required Parameters.


Because of the fact that the page the form submits to (sendmessage.php) is the same as the page that the form came from (sendmessage.php), when a user clicks the back button in their browser, their message has been lost. This is very frustrating.

Please either change the form submission destination to a different page so that when clicking back the content filled into the fields is retained
OR
Change the checks for empty fields to something client side (javascript) so that the submission is blocked before it happens
OR
remove the check and allow messages to have a blank subject field

Change History

Changed 3 years ago by gene_wood

OR
Change the form submission page (which is POSTed to) to redisplay the form with the contents from the previous page (after XSS cleaning the contents)

Changed 3 years ago by ctsai

  • owner set to ctsai
  • status changed from new to assigned

Changed 3 years ago by burley

  • keywords ENGR NF-1653 added; send message removed

Changed 23 months ago by ctsai

  • status changed from assigned to closed
  • resolution set to wontfix

Greetings,

This issue only affects the classic SourceForge system, which we are no longer developing. As such, I'm closing this ticket as "wontfix".

Regards,
Chris Tsai, SourceForge.net Support

Note: See TracTickets for help on using tickets.