PAWECOGmbH/saaster

reinit parameter has no visible effect without sysadmin login

開放

#712 建立於 2026年1月25日

 (0 則留言) (0 個反應) (0 位負責人)ColdFusion (7 個分叉)auto 404
enhancementgood first issue

倉庫指標

星標
 (36 顆星)
PR 合併指標
 (PR 指標待抓取)

描述

In Application.cfc there is a mechanism to reinitialize the application scope using the reinit URL parameter.

When using the reinit URL parameter in Application.cfc without being logged in as sysadmin, the application scope is not reinitialized and no feedback is given. This is confusing during development, because code changes in scoped functions appear to be ignored and it is not obvious that the reinit was blocked due to missing permissions.

Solution: } else if (structKeyExists(url, "reinit")) { writeOutput("Unauthorized reinit attempt by IP " & session.usersIP); structDelete(url, "reinit"); abort; }

貢獻者指南