Welcome to Geeklog, Anonymous Wednesday, January 22 2025 @ 01:28 pm EST

Comments for Geeklog security issues (and 1.3.7sr2 update)

Geeklog security issues (and 1.3.7sr2 update) | 43 comments | Create New Account

The following comments are owned by whomever posted them. This site is not responsible for what they say.

Bug in security patch?

Authored by: klync on Tuesday, May 27 2003 @ 05:23 pm EDT

I installed the upgrade package, replacing the existing files one at a
time after comparing for differences. Well, everything seemed fine,
but now some of my users are having problems. People who were
given story.edit permissions are being denied, and the error log
shows a blank space where their user name should be (i.e. "User
tried to illegally submit or edit story 20030527171709411 ). All
other aspects of the site treat the person like they're logged in,
except this.

Bug in security patch?

Authored by: Dirk on Tuesday, May 27 2003 @ 06:21 pm EDT

Make sure the topic permissions for those users are correct.

The missing user name in the error.log enty is a bug: The variable $_USER isn't declared as a global variable in function submitstory() in admin/story.php. It shouldn't have anything to do with your problems, though.

bye, Dirk

Bug in security patch?

Authored by: klync on Wednesday, May 28 2003 @ 09:58 am EDT

Thanks Dirk,

That seems to have worked. It's ironic that I had the topic/group
permissions set up wrong the whole time, but didn't notice because
of the bug.

My apologies to the developers who provided the upgrade, for
insinuating that the fix was broken. I'm glad I'm wrong!

Search

Resources

About

Getting started

Support

Development

Topics

User Functions

What's New

Articles last 4 weeks

Comments last 4 weeks

Pages last 4 weeks

Links last 4 weeks

Downloads last 4 weeks