Not signed in (Sign In)

Categories

Vanilla 1.1.5 is a product of Lussumo. More Information: Documentation, Community Support.

Help keep Vanilla free:
Welcome Guest!
Want to take part in these discussions? If you have an account, sign in now.
If you don't have an account, apply for one now.

Add-on Requests: Help from Jazzman

Bottom of Page

1 to 1 of 1

  1.  
    • CommentAuthormaxwizards
    • CommentTimeDec 22nd 2006
     # 1
    i've wrote in this discussion : http://lussumo.com/community/discussion/4495/attachments-20-security-bug/#Item_6
    but as i'm not getting any answer...here i am...

    I have to use Attachment 1.4 as i must have it folder based, but the problem i have is the security issue of anyone being able to access the attachment even if they are not logged to the discussion.
    ideally the URL of the attached file should not allow one that doesn't have the proper role to access the file...

    any possible help on this ?
    i know Jazzman is now dedicated to v2 but a 1.42 to fix this security issue would be amazing :)

    thanks in advance

1 to 1 of 1

  1.  
Add your comments
    Username Password
  • Format comments as
 
Back to Discussions Top of Page