Hi, I'm not sure how to handle this issue I've been seeing recently. One morning several weeks ago I woke up and went to my site (allisonmackonline.com) and noticed I was already logged in...as another member of the site. I cleared my cookies and cache and it reset.

I just got a message from a user saying that they were logged in as me.

What is causing this? Have you guys seen this before? What can I do to prevent this? If any random user can log in as me, the site has a serious security risk that needs to be addressed.

I'm running XOOPS 2.0.13 on a linux machine.

Alright, well--the original problem is still there. I can't figure out what is going on.

Again, the original problem is that I cannot get it set so that the users can submit an image and let it get approved by the admins. Instead, it just pushes the images right on through...no matter how I have my group settings.

I've tried updating the module. I've tried turning all options off, turning all on, changing them randomly...and nothing is setting it so that images must get approved.

I've tried everything short of uninstalling the module and re-installing it--and i'm hesitant because I'm worried it will delete all of my images from the server.

In fact, an interesting note--my anonymous and registered users are set exactly the same. It requires admin approval for anonymous people, but not for registered people...yet there is no difference in the settings via the control panel.

Does anyone else have any ideas what might be causing this?

INNNTERESTING.

Okay, well i decided to try it again and uhm..it worked.

What i did was change the group settings...then sync them, and THEN go upgrade the module.

*phew* well thanks for the attention anyway. hopefully others can see this and solve the issue if they are having it too.

Can we have some of you guys help me look into this still? I am now having members upload images that don't belong to them--and I would really like to curve this as soon as possible.

nope that didn't work.

php info:
4.3.9

Xoops version
2.0.7.3

should i back up my images before doing that?

edit: i need to back them up anyhow. :)

Quote:

Yes, thats my problem--the users can upload pictures without approval. I've tried setting all groups to "Yes" for auto approve to see if that would change anything--and it didn't.

I just performed another test, I set all groups to "no" for approval, and regular members can upload. I set all groups to "yes" and regular members can upload. Its boggling my brain.

Alright, I've searched and searched and cannot find my same problem anywhere.

When i first installed this gallery about a month ago or so, all images had to get approval, including the ones I added via the "batch add" process. That was annoying so i played with the webmaster group settings and some how it started working all on its lonesome (or maybe it was some settings).

At anyrate, it worked alright..it set is so that any of my members can upload images without approval at all. It doesn't matter how I have my group permissions set in the admin area for the gallery...nothing changes. Even when i synch them, nothing changes.

I really don't want this to be the case at this particular site, because it can lead to a lot of clean-up work for me if someone decides they want to be cheeky, or they want to post a lot of nude or obscene pictures.

I was hoping some of you could give me some insight on what to check to figure out what the problem is.

Here's some basics I've done already...

In XOOPS Groups, all groups are set to have module access to the gallery. the configuration for the gallery module group permissions are here.

To Clarify, i need to make it so that all registered members must have images approved.