[TYPO3-core] RFC Bug #10050: Traversing back page records used in CONTENT object does not work on root page

[Oliver Hader]

Hi Bernhard,

Bernhard Kraft schrieb:
> Oliver Hader schrieb:
>> FYI: Committed to SVN Trunk (rev. 5389)
> 
> Hello Oliver!
> 
> I just talked to Steffen, and we noticed a problem with this patch. It
> break menus with ".special = updated". See bug #12169:
> 
> http://bugs.typo3.org/view.php?id=12169
> 
> As I wrote in my posting in May, the best way to achieve what you want
> would be to use the "levelmedia" option of getData:
> 
> So instead of your proposed:
> ---------------------------------
> 10 = CONTENT
> 10 {
>   table = pages
>   select.where = media!=''
>   slide = -1
> }
> ---------------------------------
> 
> You should use:
> ---------------------------------
> 10 = TEXT
> 10 {
> 	data = levelmedia : -1, slide
> }
> ---------------------------------

Thanks for the suggestion which works in this special case for media fields.

> In fact allowing to select "any" record from "pid=0" brings up some
> security issues - as it would allow to list BE_USER in the FE, just by
> setting appropriate TypoScript code!

That's not true. See the check for the table 'pages' in the patch.
Outputting be_users records via TypoScript is not possible.

olly
-- 
Oliver Hader
TYPO3 Release Manager 4.3