News:

CRITICAL UPGRADE CPG RELEASE 1.6.30
Version 1.6.30 removes a serious security issue that could allow unauthorized access to modify your site. Upgrade as soon as possible.

Main Menu

Why can't displayimage.php just be called with pid?

Started by ruckerz, April 26, 2006, 04:03:46 AM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

ruckerz

Why doesn't the following work? http://blah.blah.blah/gallery/displayimage.php?pid=XXX ? The offending code is in

if (!isset($_GET['pos'])) cpg_die(ERROR, $lang_errors['non_exist_ap'], __FILE__, __LINE__);

in displayimage.php line 308.

Sure pos is missing, but if pid is defined you have everything you need to pull a picture.  The current method requires fullsize,slideshow, or pos to be defined. $pos was defined back around 261 (using only pid)

FR


Stramm

that's not the intended usage of pid
try to add &fullsize=1

Joachim Müller


Abbas Ali

....or wait for future release in which pid will replace pos ;)
Chief Geek at Ranium Systems