all users can show my secured albums all users can show my secured albums
 

News:

CPG Release 1.6.28
added submissions from {406man}
cleaned up a few PHP (8.4) deprecations
fixed PHP deprecation in calendar
removed security vulnerability
(please upgrade when possible)

Main Menu

all users can show my secured albums

Started by yeroen, September 27, 2004, 09:36:07 PM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

yeroen

hi,

I never noticed it, but when a user registers, it's possible for them to show all pictures within all secured usergroups, since Ive put in the phpbb-bridge. They are not supposed to have permission for that!  ::) I guess, I need to have a code-change, which allows user_level to be 1, and still has the same security as it has when  user_level is 0. When user_level is 0, it works ok, that means that the usergroups are working normally, and non-groupies can not show the pics within the group-environment. It causes problems within phpbb though, when I set std. user_level 0. Please help me out  ???

yeroen

yeroen

found the sollution.
check the bridge-directory, and edit the phpbb-bridgefile. Change user_level there(2 entries)...
:)