Geeklog security issues (and 1.3.7sr2 update)

Welcome to Geeklog Saturday, October 16 2021 @ 01:35 pm EDT

Geeklog security issues (and 1.3.7sr2 update) | 43 comments | Create New Account

The following comments are owned by whomever posted them. This site is not responsible for what they say.

Geeklog security issues (and 1.3.7sr2 update)

Authored by: ScurvyDawg on Tuesday, May 27 2003 @ 03:51 am EDT

I will do everything as you instruct but I do have one question.

With these new settings, image uploading is turned off? Is that altogether? Meaning no images uploading into the database is now allowed??

Sorry if I misunderstand, that is why I ask.

Geeklog security issues (and 1.3.7sr2 update)

Authored by: Dirk on Tuesday, May 27 2003 @ 05:15 am EDT

The above instructions to turn off image upload are only for those who are running an old version of Geeklog. It's meant as a temporary measure prior to an upgrade to 1.3.7sr2.

If you upgrade to 1.3.7sr2 right away, you don't need to turn off image upload, since the upgrade includes fixes for this vulnerability.

And, yes, setting both $_CONF['maximagesperarticle'] and $_CONF['allow_user_photo'] to 0 will prevent any form of image upload in Geeklog (at least for the core functions - plugins are a different matter ...).

bye, Dirk

Geeklog

Search

Resources

About

Getting started

Support

Development

Topics

User Functions

What's New

Articles last 4 weeks

Comments last 4 weeks

Pages last 4 weeks

Links last 4 weeks

Downloads last 4 weeks