1
siwilkins
Expiring tokens when uploading avatars
  • 2005/12/12 17:35

  • siwilkins

  • Just popping in

  • Posts: 2

  • Since: 2005/9/19


Hi there,

One of our users has complained of lots of error messages when uploading avatars. Upon investigation I have found that if a user uploads an image which exceeds the size limits and then clicks back to the avatar upload form then they will always get a "Sorry, you don't have the right to edit this user's info." error when they try to upload again.

Now, I have resolved this by changing the if statement in the edituser.php "avatarupload" section to call the XoopsSecurity.check function with false rather than the default true parameter, thus:

if (!$GLOBALS['xoopsSecurity']->check(false)) {

...

}

and it now works fine. I just wanted to check that this isn't going to leave a gaping hole. Anyone's thoughts would be very much appreciated.

Cheers,
Si

Login

Who's Online

140 user(s) are online (48 user(s) are browsing Support Forums)


Members: 0


Guests: 140


more...

Donat-O-Meter

Stats
Goal: $100.00
Due Date: Nov 30
Gross Amount: $0.00
Net Balance: $0.00
Left to go: $100.00
Make donations with PayPal!

Latest GitHub Commits