[openupload-devel] Security Bug Fix release v0.4beta2 now available for download
Status: Beta
Brought to you by:
tsdogs
|
From: Alessandro B. <ts...@br...> - 2009-02-06 20:39:34
|
Hi list, I have found a nasty bug in the version 0.4beta1 which I fixed with this release. Bug #2573950: Security bug for multiple files upload -------------------------------------------- When uploading more than 1 files the security options to download the additional files are not respected. So if i get a download link like ?action=d&id=1234 accessing the additional files like ?action=d&id=1234_1 does not respect security and allows direct download of the file. ---------------------------------------------- Other minor bug fixed: #2516440: undefined mysqlDB::close #2507419: wrong display - admingroups Everybody using v0.4beta1 is advised to update. Ciao, Alessandro |