BUG in coppermine.sql RC1 & RC2 BUG in coppermine.sql RC1 & RC2
 

News:

cpg1.5.48 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.
[more]

Main Menu

BUG in coppermine.sql RC1 & RC2

Started by gtroll, November 06, 2003, 10:34:32 PM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

gtroll

Run this query in phpmyadmin:
UPDATE cpg_usergroups SET has_admin_access= 0 WHERE group_id=3

if you don't use cpg_ as your table name adjust accordingly
We will have a RC2 shortly with this fix in it.

rhydewithdis

Hey - thanks for the update of this bug - I actually helped DJMaze identify this one - I'm not too familiary with phpMyAdmin - could you give alittle more information on how to run this query in phpmyadmin.  I can get to the phpmyadmin page and also into my DB but I'm not sure how to exactly run the query.  Thanks

DJMaze

[list=1]
  • Choose the correct database
  • Then in right frame click on SQL tab.
  • Paste above code in there and execute
  • [/list:o]
There are 2 kinds of users in this world: satisfied and complainers.
Why do we never hear something from the satisfied users?
http://coppermine-gallery.net/forum/index.php?topic=24315.0

rhydewithdis

DJMaze - I ran that query just now - here was the result:
UPDATE cpg11d_usergroups SET has_admin_access = 0 WHERE group_id = 3

(note my DB for usergroups is listed as cpg11d_usergroups....)

However the permissions still aren't working correctly (i.e. albums under "registered users only" still show up to visitors who have not registered).

Note: Content of this link may be inappropriate to minors:
http://www.vivrant.com/modules.php?name=coppermine&cat=7

Maze - what you think?

DJMaze

nice pictures 8)

donno i shall try to find the bug
There are 2 kinds of users in this world: satisfied and complainers.
Why do we never hear something from the satisfied users?
http://coppermine-gallery.net/forum/index.php?topic=24315.0