IP address showing in Last Viewed meta album IP address showing in Last Viewed meta album
 

News:

cpg1.5.48 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.
[more]

Main Menu

IP address showing in Last Viewed meta album

Started by Tranz, March 09, 2005, 01:42:50 AM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

Tranz

Was it intentional to show the IP address of the latest visitors in the Last Viewed meta album?

I can understand if it's displayed for an admin but I don't think it should be displayed to regular users. I think it would also bring up support requests and privacy complaints.

donnoman

probably wasn't intentional.

1.32 Just shows date/time.

It seems to make sense to me to make that admin only.  I don't see a lot of value for other folks to see that.

I'll take a look at making that happen.

donnoman

I caught a second problem with thumbnail captions in the last comment block; the body wasn't being bb_decoded and was being shown raw.

I was hesitant to just bb_decode comments on thumbnails in the caption since these are user contributed items and could be malicious. I didn't want them to be displayed without the report to admin function being readily available. So I run it through a strip_tags after bb_decode to hamstring any fancy stuff and hrefs.

This means just text will display on the thumbnails. It will be fully bb_decoded the other places it's displayed.

IP address display is now dependent on being in "Gallery_Admin_Mode".

fixes comitted.

Tranz