Mamblog 1.0 RC2 security concern:

ivytony · 28.02.2005, 06:59

Hi, everybody:

I downloaded and installed Mamblog 1.0 RC2 from mamboportal.com

after installation, I found that when common users tried to make blog entries, the WYSIWYG editor allows the user to delete pictures from media folder (which is normally used in the backend of mambo media manager). In this way, some malignant users may delete all the pictures that are used in the mambo system.

any ideas as to how to fix this problem? thanks

Quote:

Mamblog 1.0 RC 2 (Downloads)
A user blog system that allows for users to sign up to write their own blogs.

MrSleep · 28.02.2005, 08:35

Whats the version of WYSIWYG? Insert this code in file query image:

Code:

if (! $my->id) {
	require( "path_to_admin/administrator/includes/auth.php" );
}