Welcome to Geeklog, Anonymous Thursday, May 02 2024 @ 06:10 pm EDT

Comments for Potential Security Flaw

Potential Security Flaw | 10 comments | Create New Account

The following comments are owned by whomever posted them. This site is not responsible for what they say.

Potential Security Flaw

Authored by: Dirk on Thursday, May 15 2003 @ 10:59 am EDT

Well, I had to read it twice ;-) but then I was able to reproduce it.

Yes, this is a bug. The topic permissions should work similar to the the folder permissions on a file system: If you don't have access to the folder (topic) you shouldn't be able to see the files (stories) in it. As you saw, article.php implements this correctly, but index.php doesn't.

A replacement for index.php is now available from the Downloads section. It fixes this problem as well as two other minor issues (not security related: the number of pages on the "Google paging" was wrong under certain conditions and some right blocks didn't show up for an empty topic).

Simply copy the new index.php over the one on your website and all should be well again.

Thanks for bringing this to our attention!

bye, Dirk

Warning: Javascript required to enable functionality

Post a Comment

Search

Resources

About

Getting started

Support

Development

Topics

User Functions

What's New

Articles last 4 weeks

Comments last 4 weeks

Pages last 4 weeks

Links last 4 weeks

Downloads last 4 weeks