search

vmichnowicz / vwm_secure_files

Lock down member and group-specific ExpressionEngine files
6 stars 0 forks source link

Different VWM links opening same file #4

Closed tyssen closed 13 years ago

tyssen commented 13 years ago

I've just noticed after entering 40+ files into the module that sometimes different module links open the same file although it doesn't happen for all of them. The module is actually producing links with unique IDs but clicking on them sometimes opens the same file. Not sure if it's a browser-specific thing or not but I'm using Chrome 13.0.782.32 on a Mac.

vmichnowicz commented 13 years ago

Humm... I will have to look into this. Off the top of my head I can't think of any reason this should be happening.

magnussonco commented 13 years ago

Yeah I'd like to second this, I'm having the same trouble with only 2 files, both have different urls and are pointing to different 'secure_files', but the same file is being delivered.

http://localhost/en/index.php/?ACT=27&ID=b21f7f2e27a32869f0df4832ba95efc9 http://localhost/en/index.php/?ACT=27&ID=b9c52abd15f426c2ff6982c2559488d7

Using EE 2.2.2 - Build: date 20110801, running locally on OSX, Apache/2.2.16, PHP/5.2.14.

Any ideas?

vmichnowicz commented 13 years ago

This is really trippy. What happens if you append some random data at the end of the URL? Does it still load the incorrect file?

http://localhost/en/index.php/?ACT=27&ID=b21f7f2e27a32869f0df4832ba95efc9&random=random123asdf

magnussonco commented 13 years ago

No difference adding get variables... As I mentioned earlier I had only two files, and the first secure file was being delivered regardless of which link I clicked. I tried deleting the first file (and any references to it) and the second link then started delivering the correct file (instead of the first as before). I then added the first file again and now both links work fine.

I've since added another file and that works fine too, but I'm still not sure what put it in the state of all links only delivering the first file?

vmichnowicz commented 13 years ago

Ok... I am able to reproduce this. I'm sure I'm doing something incredibly dumb. I'll be looking into this...

vmichnowicz commented 13 years ago

Yeah, that was dumb. I was casting the hash as in integer. Should be good now.

magnussonco commented 13 years ago

Sweet, thanks Victor, case closed.