Rights of editing picture description field

huogas

Yesterday I upgraded my 1.3 installation to the last build available and I'm no longer able to edit the photo descriptions. I did not change anything else.

I'm admin. What should I check ?

Gaston

Zenphoto version 1.3 [5722] (Official Build)
Current gallery theme: ZenpageGH
PHP version: 5.2.13
Graphics support: PHP GD library bundled (2.0.34 compatible)
PHP memory limit: 256M (Note: Your server might allocate less!)
MySQL version: 5.0.90
Database name: rimqnet_zenphoto
Table prefix: zp5_
Spam filter: none
CAPTCHA generator: zenphoto

fretzl

If you mean front-end editing, that is by default turned off now for security reasons.
You can now activate/disable that in options -> general.

If you mean back-end editing, I have no clue ;-)

huogas

Thanks, you answered my question. It was related to the front-end, and that flag was not there before I moved to the last build.

Where can I find more information about the security aspect of this access ?

Thanks again,

Gaston

fretzl

I think sbillard knows all about that.
But you could Google for `XSRF` if I'm correct.

huogas

You are right, I think.

http://fr.wikipedia.org/wiki/Cross-site_request_forgery

acrylian

Yep, that's it exactly.

huogas

For those who reads french:
http://www.infos-du-net.com/forum/271950-21-securite-contrer-attaques-xsrf

Gaston