+- ZenphotoCMS Forum (https://forum.zenphoto.org)
+-- Forum: Support (https://forum.zenphoto.org/forum-1.html)
+--- Forum: General support (https://forum.zenphoto.org/forum-4.html)
+--- Thread: Rights of editing picture description field (/thread-7442.html)
Rights of editing picture description field - huogas - 2010-08-07
Yesterday I upgraded my 1.3 installation to the last build available and I'm no longer able to edit the photo descriptions. I did not change anything else.
I'm admin. What should I check ?
Gaston
Zenphoto version 1.3 [5722] (Official Build)
Current gallery theme: ZenpageGH
PHP version: 5.2.13
Graphics support: PHP GD library bundled (2.0.34 compatible)
PHP memory limit: 256M (Note: Your server might allocate less!)
MySQL version: 5.0.90
Database name: rimqnetzenphoto
Table prefix: zp5
Spam filter: none
CAPTCHA generator: zenphoto
Rights of editing picture description field - fretzl - 2010-08-07
If you mean front-end editing, that is by default turned off now for security reasons.
You can now activate/disable that in options -> general.
If you mean back-end editing, I have no clue ;-)
Rights of editing picture description field - huogas - 2010-08-07
Thanks, you answered my question. It was related to the front-end, and that flag was not there before I moved to the last build.
Where can I find more information about the security aspect of this access ?
Thanks again,
Gaston
Rights of editing picture description field - fretzl - 2010-08-07
I think sbillard knows all about that.
But you could Google for XSRF if I'm correct.
Rights of editing picture description field - huogas - 2010-08-07
You are right, I think.
http://fr.wikipedia.org/wiki/Cross-site_request_forgery
Rights of editing picture description field - acrylian - 2010-08-07
Yep, that's it exactly.
Rights of editing picture description field - huogas - 2010-08-08
For those who reads french:
http://www.infos-du-net.com/forum/271950-21-securite-contrer-attaques-xsrf
Gaston