Why can't displayimage.php just be called with pid? Why can't displayimage.php just be called with pid?
 

News:

cpg1.5.48 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.
[more]

Main Menu

Why can't displayimage.php just be called with pid?

Started by ruckerz, April 26, 2006, 04:03:46 AM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

ruckerz

Why doesn't the following work? http://blah.blah.blah/gallery/displayimage.php?pid=XXX ? The offending code is in

if (!isset($_GET['pos'])) cpg_die(ERROR, $lang_errors['non_exist_ap'], __FILE__, __LINE__);

in displayimage.php line 308.

Sure pos is missing, but if pid is defined you have everything you need to pull a picture.  The current method requires fullsize,slideshow, or pos to be defined. $pos was defined back around 261 (using only pid)

FR


Stramm

that's not the intended usage of pid
try to add &fullsize=1

Joachim Müller


Abbas Ali

....or wait for future release in which pid will replace pos ;)
Chief Geek at Ranium Systems