hope this is the right place.... hope this is the right place....
 

News:

cpg1.5.48 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.
[more]

Main Menu

hope this is the right place....

Started by mzsparrow, March 19, 2005, 08:37:53 AM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

mzsparrow

i cant log in to my gallery :(

my user name is sparrow-
but it says the pass/username is invalid :(

Joachim Müller

use phpMyAdmin to reset your password. What else could I say...

Joachim

mzsparrow

someone else set up the gallery for me and is remotely hosting it. i dont have access to any of the files and such like that. is there a way a mod can reset it for me?

Joachim Müller

if you don't have ftp-access to the files there's nothing you can do except asking the person for help who set it up for you.

Joachim

mzsparrow

oh...alright.

seems funny that a main admin doesnt have access to that sort of thing, but thats okay. ill wait till the morning.

Tranz

Quote from: mzsparrow on March 19, 2005, 08:57:39 AM
oh...alright.

seems funny that a main admin doesnt have access to that sort of thing, but thats okay. ill wait till the morning.
Um, I think it would be scary if a script writer can control your site like that... :o

Is that an admin or user account?

mzsparrow

im the admin.

a friend just made this gallery for me, told me my username and password and gave me the link.
except the name/pass dont want to work.

Joachim Müller

Quote from: mzsparrow on March 19, 2005, 08:57:39 AM
seems funny that a main admin doesnt have access to that sort of thing, but thats okay.
this means you're not the full admin of the site. This is not a bug, but only comes naturally: if there was a backdoor you could use to retrieve your email account, any other attacker could. If you had ftp access, we could come up with a little script that shows you your password temporarily. If you would have entered an email address into your profile, you could have retrieved your password using the "forgot password" link. This is not a "missing feature", but simply improper setup or reluctance of your firend to give you full admin powers imo.

Joachim

mzsparrow

what i meant was like...erm...

do you know proboards?
well, on the support forum and whatsuch- if you've got a problem there is a few main admin who have access to all the accounts. so if you loose your password or something they can reset it for you.

Joachim Müller

this would be a backdoor. As coppermine is open source, every script-kiddy could take a look at the backdoor's source code and use it to gain admin access. It's by design that such a feature simply can not work. Believe us.

Joachim