Advanced search  

News:

cpg1.5.48 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.
[more]

Pages: [1]   Go Down

Author Topic: Admin can display another username  (Read 13079 times)

0 Members and 1 Guest are viewing this topic.

isajade

  • Coppermine regular visitor
  • **
  • Offline Offline
  • Gender: Female
  • Posts: 67
Admin can display another username
« on: December 14, 2007, 03:55:15 pm »

To prevent malicious attemps, will it be possible to have an option for the administrator to display on the gallery a different username than the one used to log in. Thank you.
Logged

Joachim Müller

  • Dev Team member
  • Coppermine addict
  • ****
  • Offline Offline
  • Gender: Male
  • Posts: 47844
  • aka "GauGau"
    • gaugau.de
Re: Admin can display another username
« Reply #1 on: December 15, 2007, 12:59:22 pm »

Using a non-trivial password that is long enough should keep you save of brute-force attacks.
Logged

isajade

  • Coppermine regular visitor
  • **
  • Offline Offline
  • Gender: Female
  • Posts: 67
Re: Admin can display another username
« Reply #2 on: December 15, 2007, 01:31:31 pm »

Is there a maximum length? I had a 11  characters password that I changed to a 27 characters long and I get an error message.
Logged

Joachim Müller

  • Dev Team member
  • Coppermine addict
  • ****
  • Offline Offline
  • Gender: Male
  • Posts: 47844
  • aka "GauGau"
    • gaugau.de
Re: Admin can display another username
« Reply #3 on: December 17, 2007, 08:46:31 am »

Afaik the max number of characters for the password field is set to 40, so you should be good. 27 chars is not needed imo, I'd go for 14 chars.
There is no support in the feature requests sub-board.
Logged

isajade

  • Coppermine regular visitor
  • **
  • Offline Offline
  • Gender: Female
  • Posts: 67
Re: Admin can display another username
« Reply #4 on: December 17, 2007, 03:13:05 pm »

Ho oupsy about that, I didn't mean to.
Thank you for your reply.
« Last Edit: December 17, 2007, 03:18:31 pm by isajade »
Logged

TigerClaw

  • Coppermine novice
  • *
  • Offline Offline
  • Posts: 28
Re: Admin can display another username
« Reply #5 on: January 31, 2008, 01:50:37 am »

Apart from security (useless as explained), it can be helpfull for privacy concerns: Don't show to the general visitor that admin has uploaded that file.
Logged

Joachim Müller

  • Dev Team member
  • Coppermine addict
  • ****
  • Offline Offline
  • Gender: Male
  • Posts: 47844
  • aka "GauGau"
    • gaugau.de
Re: Admin can display another username
« Reply #6 on: January 31, 2008, 08:43:42 am »

Well, then don't name your user account "admin" or "master_of_disaster", but just "fred_jones" - nobody will then know (just by looking at the username) that a file has been uploaded by the admin. Additionally, I can't see what is suppossed to be so bad about the fact that site users can see who uploaded a file.
Logged

TigerClaw

  • Coppermine novice
  • *
  • Offline Offline
  • Posts: 28
Re: Admin can display another username
« Reply #7 on: January 31, 2008, 12:00:03 pm »

Well, then don't name your user account "admin" or "master_of_disaster", but just "fred_jones" - nobody will then know (just by looking at the username) that a file has been uploaded by the admin. Additionally, I can't see what is suppossed to be so bad about the fact that site users can see who uploaded a file.

True, but sometimes you just don't think about it before starting, you work on the gallery and you remain with "admin" which is not very cool. For example you suggested "Master of Disaster" that I want as my username on the gallery NOW!  ;D
Logged

Joachim Müller

  • Dev Team member
  • Coppermine addict
  • ****
  • Offline Offline
  • Gender: Male
  • Posts: 47844
  • aka "GauGau"
    • gaugau.de
Re: Admin can display another username
« Reply #8 on: February 01, 2008, 10:57:31 am »

Go ahead an create another admin account that is named that way.
Logged
Pages: [1]   Go Up
 

Page created in 0.016 seconds with 19 queries.