Query about Batch Add (admin mode) Query about Batch Add (admin mode)
 

News:

cpg1.5.48 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.
[more]

Main Menu

Query about Batch Add (admin mode)

Started by sdousley, April 13, 2005, 09:02:15 PM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

sdousley

Using cpg 1.2 (standalone) version.

When i choose batch add, it all works nicely, but it's only me that admins the site (only a very small site).

What i want is instead of using owner_id == 0 for batch added pictures, i want it to use owner_id == 3.

How would i go about doing this? I have tried setting the default of owner_id in the pictures table from 0 to 3, but that didn't solve the problem.

What do i need to do?

Joachim Müller

only the admin can use batch-add, because you need to ftp-upload files before doing a batch add. Granting other users ftp access to your site is a huge security risk, that's why only the admin can batch-add. It's not recommended at all to change this default behaviour. Remove the security check in searchnew.php to grant everybody access to the batch-add feature, or modify it accordingly to suit your needs if you absolutely need this feature available for everyone, but keep in mind: you have been warned! Granting ftp-access to your site is an invitation to all black-hat hackers and script kiddies.

Joachim

sdousley

sorry, i think you have misread my question.

What i want to do is, not allow everyone batch add, but allow my user (i have admin rights)

I have found a solution to my problem now anyway, i edited line:

picmgmt.inc.php line 67:

            $user_id = GALLERY_ADMIN_MODE ? 0 : USER_ID;

Changed the 0 to a 3. 3 being the user id of my admin account, so that any batch added pics (only me allowed to do so) are accredited to my account.


kegobeer

Do not send me a private message unless I ask for one.  Make your post public so everyone can benefit.

There are no stupid questions
But there are a LOT of inquisitive idiots

sdousley

I originally used 1.3.2, but couldn't find a hack/mod to make the passwords encrypted.  I prefer the features of 1.3.x, but couldn't find that key feature.