Vanilla 1 is no longer supported or maintained. If you need a copy, you can get it here.
HackerOne users: Testing against this community violates our program's Terms of Service and will result in your bounty being denied.

Set List

2»

Comments

  • Actually here is what I see in left hand column

    Start a new discussion

    *
    Extension Options
    o Nugget Management

    *
    Options
    o Application Settings
    o Updates & Reminders
    o Roles & Permissions
    o Registration Settings
    o Categories
    o Extensions
    o Themes & Styles
    o Languages

    *
    ExtensionOptions
    o reCAPTCHA
  • Set List itself has no options. It exists only to create option pages for other extensions. If you're seeing the options page for reCAPTCHA then Set List is working properly.
  • Minor security issue: it is possible for a user to be able to access 'settings.php' without having permission to change system settings (say, if they have permission to muck about with categories). So the script should explicitly test for $Context->Session->User->Permission('PERMISSION_CHANGE_APPLICATION_SETTINGS') rather than just if we're called from settings.php.
Sign In or Register to comment.