Member
Member
huogas   2010-08-07, 11:54
#1

Yesterday I upgraded my 1.3 installation to the last build available and I'm no longer able to edit the photo descriptions. I did not change anything else.

I'm admin. What should I check ?

Gaston

Zenphoto version 1.3 [5722] (Official Build)
Current gallery theme: ZenpageGH
PHP version: 5.2.13
Graphics support: PHP GD library bundled (2.0.34 compatible)
PHP memory limit: 256M (Note: Your server might allocate less!)
MySQL version: 5.0.90
Database name: rimqnetzenphoto
Table prefix: zp5

Spam filter: none
CAPTCHA generator: zenphoto

Administrator
Administrator
fretzl   2010-08-07, 12:55
#2

If you mean front-end editing, that is by default turned off now for security reasons.
You can now activate/disable that in options -> general.

If you mean back-end editing, I have no clue ;-)

Member
Member
huogas   2010-08-07, 13:18
#3

Thanks, you answered my question. It was related to the front-end, and that flag was not there before I moved to the last build.

Where can I find more information about the security aspect of this access ?

Thanks again,

Gaston

Administrator
Administrator
fretzl   2010-08-07, 13:44
#4

I think sbillard knows all about that.
But you could Google for XSRF if I'm correct.

Member
Member
huogas   2010-08-07, 14:53
#5

You are right, I think.

http://fr.wikipedia.org/wiki/Cross-site_request_forgery

Administrator
Administrator
acrylian   2010-08-07, 16:12
#6

Yep, that's it exactly.

Member
Member
huogas   2010-08-08, 16:40
#7

For those who reads french:
http://www.infos-du-net.com/forum/271950-21-securite-contrer-attaques-xsrf

Gaston

  
Powered By MyBB, © 2002-2026 MyBB Group.
Made with by Curves UI.