6202: cms_homesite_tracker: Guests can still comment on the tracker - Composr CMS feature tracker

ID	Project	Category	View Status	Date Submitted	Last Update

6202	Composr non-bundled addons	[All Projects] General	public	2025-04-14 03:22	2025-04-14 03:24

Reporter	PDStig	Assigned To	Chris Graham
Priority	normal	Severity	minor
Status	assigned	Resolution	open

Summary	6202: cms_homesite_tracker: Guests can still comment on the tracker
Description	I thought I prevented this by requiring you to be logged in to the tracker to comment. Apparently my settings are not correct as someone was able to post spam. Fix ASAP.
Tags	No tags attached.
Attach Tags	(Separate by ",")

Time estimation (hours)
Sponsorship open

Date Added	Member	Amount Sponsored

PDStig 2025-04-14 03:22 administrator ~9918	Automated message: This issue was created using the Report Issue Wizard on the homesite.

PDStig 2025-04-14 03:24 administrator ~9919	Assigning to Chris as this is high priority. However, I'll fix it myself if I end up having a spare moment. It should in theory be a quick fix in the tracker config file. But it could be an underlying issue of maybe the REST API in Mantis not being secure?

View Status	Private (for security issues or disclosing of private information; if you submit as a guest, you will not be able to see your submission)
Note
Upload Files Maximum size: 32,768 KiB	Attach files by dragging & dropping, selecting or pasting them.
You are not logged in	You are not logged in. This means you will not get any e-mail notifications. And if you reply, we will not know for sure you are the original poster of the issue.

Date Modified	Username	Field	Change
2025-04-14 03:24	PDStig	Assigned To	=> Chris Graham
2025-04-14 03:24	PDStig	Status	Not Assigned => Assigned
2025-04-14 03:24	PDStig	Note Added: 9919