[drupal-devel] [bug] Path module allows one to override existing
drupal-devel at drupal.org
Tue Feb 15 21:09:13 UTC 2005
Category: bug reports
Assigned to: Anonymous
Reported by: adrian
Updated by: adrian
Attachment: http://drupal.org/files/issues/path_menu_exists.diff (2.27 KB)
One of our users recently tried to link to /admin , using the path
module. And the link was allowed to be created.
This meant his admin menu was disabled, which should not be able to
Attached is a function added to menu.inc that steps through all the
menu items, and finds out if there is a callback registered for a
specific path, unfortunately there still exists a few problems :
Only explicitly registered callbacks are detected. For instance: 'node'
will be picked up, but 'node/12' will be allowed. This is not as easy to
test for, because of how pages default back to the top most callback,
and pass the rest of the fields as paramaters. The only way to work
around this is to explicitly define all callbacks that use parameters
with a 'paramaters'=> true in the item.
When an additional module gets enabled, any already specified links
will take precedence over the new links created by it.
More information about the drupal-devel