"Show Source" info shows version number "Show Source" info shows version number
 

News:

cpg1.5.48 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.
[more]

Main Menu

"Show Source" info shows version number

Started by lookenround, November 09, 2004, 12:46:05 AM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

lookenround

I'd like to make a suggestion that by the close body tag, where it references the CPG version number,
that the version number be an option to toggle on or off. Keeping the rest of the CPG credit info of course :)

Why? In the event there is a security patch pending, googling for Coppermine + "1.3.2" won't show potential targets so easily.
Is it a major issue, no, but something worth considering maybe?

Thanks

kegobeer

Well, since there aren't any security risks associated with Coppermine, I don't see the point.  That's a comment tag, and isn't indexed by search engines.  Doing a google search for Coppermine Photo Gallery 1.3.0 on my domain comes up with zero matches.

Sorry, don't think this will be changed.
Do not send me a private message unless I ask for one.  Make your post public so everyone can benefit.

There are no stupid questions
But there are a LOT of inquisitive idiots

Joachim Müller

It's in there for support purposes: when users post their url on this board, we can easily find out which version they use (and possibly recommend an upgrade), as most users don't care about version numbers, so they only post "the most recent version" when asked what version they use (even if they actually use cpg1.0).
We're going to leave it where it actually is, so it's an "opt-out" option for you - you can remove it if you have security concerns (although kegobeer is absolutely right: this is not a security issue imo, and there has been no security flaw known for standalone coppermine).

Joachim