all users can show my secured albums all users can show my secured albums
 

News:

cpg1.5.48 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.
[more]

Main Menu

all users can show my secured albums

Started by yeroen, September 27, 2004, 09:36:07 PM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

yeroen

hi,

I never noticed it, but when a user registers, it's possible for them to show all pictures within all secured usergroups, since Ive put in the phpbb-bridge. They are not supposed to have permission for that!  ::) I guess, I need to have a code-change, which allows user_level to be 1, and still has the same security as it has when  user_level is 0. When user_level is 0, it works ok, that means that the usergroups are working normally, and non-groupies can not show the pics within the group-environment. It causes problems within phpbb though, when I set std. user_level 0. Please help me out  ???

yeroen

yeroen

found the sollution.
check the bridge-directory, and edit the phpbb-bridgefile. Change user_level there(2 entries)...
:)