« previous next »
Pages: [1]

Author Topic: Important Security Issue  (Read 3834 times)

0 Members and 1 Guest are viewing this topic.

Offline kindian

  • Jr. Member
  • **
  • Posts: 62
    • View Profile
Important Security Issue
« on: July 16, 2005, 11:13:39 AM »
One user mailed me today saying that he sent a link to his photo to a friend. His friend saw his photo and kinda logged in with his username, they even tryed to change the profile and it worked. The link the user sent to his friend contained the session id. How can I fix that. I've already tryed to use the MOD to make the url google friendly, but it didnt work. Anyone else with this problem?
Logged

Offline V@no

  • If you don't tell me what to do, I won't tell you where you should go :)
  • Global Moderator
  • 4images Guru
  • *****
  • Posts: 17.849
  • mmm PHP...
    • View Profile
    • 4images MODs Demo
Re: Important Security Issue
« Reply #1 on: July 16, 2005, 06:52:20 PM »
Quote from: kindian on July 16, 2005, 11:13:39 AM
How can I fix that.
just dont send url with sessionid , thats plain simple...

P.S. its covered in FAQ.
Logged
Your first three "must do" before you ask a question:
Please do not PM me asking for help unless you've been specifically asked to do so. Such PMs will be deleted without answer. (forum rule #6)
Extension for Firefox/Thunderbird: Master Password+    Back/Forward History Tweaks (restartless)    Cookies Manager+    Fit Images (restartless for Thunderbird)

Offline V@no

  • If you don't tell me what to do, I won't tell you where you should go :)
  • Global Moderator
  • 4images Guru
  • *****
  • Posts: 17.849
  • mmm PHP...
    • View Profile
    • 4images MODs Demo
Re: Important Security Issue
« Reply #2 on: July 16, 2005, 08:00:02 PM »
Logged
Your first three "must do" before you ask a question:
Please do not PM me asking for help unless you've been specifically asked to do so. Such PMs will be deleted without answer. (forum rule #6)
Extension for Firefox/Thunderbird: Master Password+    Back/Forward History Tweaks (restartless)    Cookies Manager+    Fit Images (restartless for Thunderbird)

Offline kindian

  • Jr. Member
  • **
  • Posts: 62
    • View Profile
Re: Important Security Issue
« Reply #3 on: July 17, 2005, 03:42:24 AM »
Thanks Vano. It seems it is working.
Logged
Pages: [1]
« previous next »