Bug #34527

Add method in repositories does also update

Added by Kira Backes over 9 years ago. Updated over 9 years ago.

Status:
Resolved
Priority:
Must have
Category:
Persistence
Start date:
2012-03-05
Due date:
% Done:

100%

Estimated time:
PHP Version:
Has patch:
No
Complexity:

Description

The add method in repositores does also update existing entities, this is a dangerous security flaw, as it allows an attacker to misuse creation forms (i.e. a register form) and change existing entities.

Also available in: Atom PDF