Not a bug Ability to React Despite Disabled Reactions

[Recep Baltaş]

Affected version

2.3

The reaction feature is disabled in suggestion topics. However, there is a loophole that allows adding reactions to suggestion topics.


e.g.

https://techolay.net/sosyal/posts/mesajid/react?reaction_id=7

Here, by replacing "mesajid" with the ID of message #1 in the suggestion topic, it becomes possible to leave a dislike reaction on that topic. To make this clearer, I would like to demonstrate it with a video.

Watch Recording 2025-08-15 170349 | Streamable

Watch "Recording 2025-08-15 170349" on Streamable.

streamable.com

 

[Chris D]

What mechanism exactly have you deployed to prevent the first post from being reacted to?

The reason I ask is because I can clearly see that reactions are enabled in the forum in your video, because the reaction links are visible on the subsequent posts.

This isn't a feature of the software.

If you disable the reaction permission for the entire node and attempt the same thing, you correctly get a permission denied error:



So I suspect an add-on is involved that isn't correctly preventing the likes - that's not a bug for us to fix and something that should be reported to the add-on author.

 

[hasanmerkit]

I agree as well. It seems like an issue with the addon. Even though they hid the emoji option on the frontend, they should have also blocked it on the backend.