Advanced search  

News:

cpg1.5.48 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.
[more]

Pages: [1]   Go Down

Author Topic: Security issue?  (Read 5139 times)

0 Members and 1 Guest are viewing this topic.

ev

  • Coppermine newbie
  • Offline Offline
  • Posts: 2
Security issue?
« on: January 12, 2004, 12:05:48 am »

I'm running e107 v0..608 with Coppermine, which is a pleasure.

I can restrict the menu (the Coppermine random image) and the main menu link to Gallery to ex. members only ... works fine!

BUT by typing the full URL

htttp://url/e107_plugins/coppermine_menu/index.php

in a browser gives users with no membership (member cookies are removed) direct access to the Gallery.

Question: do you know how to close that security issue???

ev  
 :shock:
Logged

Joachim Müller

  • Dev Team member
  • Coppermine addict
  • ****
  • Offline Offline
  • Gender: Male
  • Posts: 47843
  • aka "GauGau"
    • gaugau.de
Security issue?
« Reply #1 on: January 12, 2004, 10:01:00 am »

please understand that the e107 port of coppermine is a user contribution, not the work of the dev team. As this is clearly an e107-issue (user authentification is done by the platform), there's little we can do about it. Maybe you should post this question on the e107 support board or contact the author of the port directly.

GauGau
Logged

ev

  • Coppermine newbie
  • Offline Offline
  • Posts: 2
Security issue?
« Reply #2 on: January 12, 2004, 08:09:35 pm »

I appreciate your quick answer ... thanks alot / your platform statement gives me something to think about /
Logged
Pages: [1]   Go Up
 

Page created in 0.012 seconds with 14 queries.