Geeklog Forums

I came across a security issue that will allow non admin users, or should I say anybody be able to access the editable pages only by knowing the url. I noticed this with Static pages and have yet to try any other "direct" links. Is there a away to secure this? Is more information necessary, and if so what will you need to know to supply this information.

thanks
TV

Please see Focus on Security on how we handle security issues (also linked from the "Resources" block on the left side, btw).

Thanks.

bye, Dirk

For the record: We haven't heard back from this gentleman.

The "edit" URLs are no secret and Geeklog's security model is not "security by obscurity". Unless someone found a novel way to bypass Geeklog's permission checks, I don't see how "anybody" would be able to edit static pages.

bye, Dirk