Share

FileMgmt - Improved Access Checking for Upload Form

Monday, March 08 2010 @ 08:16 PM CST

Contributed by: Mark

FileMgmt allows any user to access the upload form, even if they do not have access to upload to any FileMgmt categories. Once they try to upload, the proper security checks are performed and the upload is blocked.

The follow updates will prevent the user from accessing the upload form if they do not have access to any categories.

private/plugins/filemgmt/functions.inc
public_html/filemgmt/submit.php

These patches should only be applied to glFusion v1.1.8 and have been included in glFusion v1.1.8 Patch Level 4.

For more information on Patch Levels, please see the glFusion Patch Updates story.

  

  • Currently 0.00/5
Rating: 0.00/5 (0 votes cast)

Story Options