Re: [limesurvey-developers] [Limesurvey-subversion] SF.net SVN: limesurvey:[8775] source/limesurvey/index.php

[Thibault Le M. <Thi...@su...>]

Le 02/06/2010 14:12, c_s...@us... a écrit :
> Revision: 8775
>            http://limesurvey.svn.sourceforge.net/limesurvey/?rev=8775&view=rev
> Author:   c_schmitz
> Date:     2010-06-02 12:12:19 +0000 (Wed, 02 Jun 2010)
>
> Log Message:
> -----------
> Fixed issue #4265: Users see "Error / We are sorry but you don't have permission to do this..." when accessing a survey that doesn't exist instead of expected Survey is not available message
>    

The former behaviour was more secure... because it was preventing bad 
people from scanning existiong surveysId (by bruteforcing them)....
It would be better to let the system-admin decides if he wants to expose 
his installation to such attacks.

My 2 cents,
Thibault