phpwebsite-developers

[Phpwebsite-developers] Potential Security Problem in PHP-Website

[Stephan A. <st...@de...>]

Hello!

Setting up an PHPWebsite for our project (http://www.systemli.org) we 
discovered a potential security Problem in the Bulletin Search Function.

So if are an anonymous user on the site, and you search the Bulletin Board the 
search funktion shows results from hidden boars an boards you don't heave any 
read permission to.

Regards
Stephan

--
Never underestimate the power of human stupidity.

Re: [Phpwebsite-developers] Potential Security Problem in PHP-Website

[Don S. <do...@se...>]

On Wed, Apr 07, 2004 at 06:29:38PM +0200, Stephan Adler wrote:
> Setting up an PHPWebsite for our project (http://www.systemli.org) we=20
> discovered a potential security Problem in the Bulletin Search Function.

That's a phpwsBB issue.  If you can file a bug at phpwsBB that would be
great.  Also be sure you are using the latest version of phpwsBB.

http://phpwsbb.sourceforge.net

Don.

--=20
"This is what I'm good at.  I like meeting people, my fellow citizens.  I l=
ike
interfacing with them."

George W. Bush
September 8, 2000
Comment made at campaign stop in Pittsburgh, Pennsylvania.