PiRSquared17 / open-forum

Automatically exported from code.google.com/p/open-forum
0 stars 0 forks source link

Unauthorised users can post files #126

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago
What steps will reproduce the problem?
1. Post a file to a restricted page without logging in
2.
3.

What is the expected output?

Only authorised users can post

What do you see instead?

Unauthorised users are prompted to login or use Captcha but the file has
already been posted to the page.

Original issue reported on code.google.com by nicholas...@gmail.com on 24 Sep 2008 at 8:33

GoogleCodeExporter commented 9 years ago
Fixed by adding Authentication earlier and having the file first placed in a 
locked
folder /OpenForum/Temporary

Original comment by nicholas...@gmail.com on 24 Nov 2008 at 10:18

GoogleCodeExporter commented 9 years ago
Fixed in release 2.3

Original comment by nicholas...@gmail.com on 24 Nov 2008 at 10:19