Advanced search  

News:

cpg1.5.48 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.
[more]

Pages: [1]   Go Down

Author Topic: all users can show my secured albums  (Read 2592 times)

0 Members and 1 Guest are viewing this topic.

yeroen

  • Coppermine novice
  • *
  • Offline Offline
  • Posts: 24
    • http://phreaky.is-a-geek.net
all users can show my secured albums
« on: September 27, 2004, 09:36:07 pm »

hi,

I never noticed it, but when a user registers, it's possible for them to show all pictures within all secured usergroups, since Ive put in the phpbb-bridge. They are not supposed to have permission for that!  ::) I guess, I need to have a code-change, which allows user_level to be 1, and still has the same security as it has when  user_level is 0. When user_level is 0, it works ok, that means that the usergroups are working normally, and non-groupies can not show the pics within the group-environment. It causes problems within phpbb though, when I set std. user_level 0. Please help me out  ???

yeroen
« Last Edit: October 07, 2004, 02:37:53 pm by TranzNDance »
Logged

yeroen

  • Coppermine novice
  • *
  • Offline Offline
  • Posts: 24
    • http://phreaky.is-a-geek.net
Re: all users can show my secured albums
« Reply #1 on: October 07, 2004, 11:34:52 am »

found the sollution.
check the bridge-directory, and edit the phpbb-bridgefile. Change user_level there(2 entries)...
 :)
Logged
Pages: [1]   Go Up
 

Page created in 0.015 seconds with 15 queries.