Hi list,
I have found a nasty bug in the version 0.4beta1 which I fixed with this
release.
Bug #2573950: Security bug for multiple files upload
--------------------------------------------
When uploading more than 1 files the security options to download the
additional files are not respected.
So if i get a download link like
?action=d&id=1234
accessing the additional files like
?action=d&id=1234_1
does not respect security and allows direct download of the file.
----------------------------------------------
Other minor bug fixed:
#2516440: undefined mysqlDB::close
#2507419: wrong display - admingroups
Everybody using v0.4beta1 is advised to update.
Ciao,
Alessandro
|