|
Viewing Issue Advanced Details
[ Jump to Notes ]
|
[ Issue History ]
[ Print ]
|
|
ID |
Category |
Severity |
Reproducibility |
Date Submitted |
Last Update |
|
0000904 |
[Piwigo] web API |
minor |
have not tried |
2008.12.02 22:57 |
2008.12.02 23:35 |
|
|
Reporter |
plg |
View Status |
public |
|
|
Assigned To |
plg |
|
Priority |
normal |
Resolution |
fixed |
Platform |
|
|
Status |
closed |
|
OS |
|
|
Projection |
none |
|
OS Version |
|
|
ETA |
none |
Fixed in Version |
2.0.0 |
Product Version |
2.0.0RC4 |
| |
Target Version |
2.0.0 |
Product Build |
|
|
|
Summary |
0000904: [pwg.images.add] automaticaly created directories are not protected |
|
Description |
When adding a photo via pwg.images.add API method, a directory upload/2008/12/02 is created (and "thumbnails" + "high" sub directories), but any gallery visitor can browse the directories and see the photo list in a browser. |
|
Steps To Reproduce |
|
|
Additional Information |
|
| Tags |
No tags attached. |
|
|
browser |
any |
|
Database engine and version |
|
|
PHP version |
|
|
Web server |
Apache 1.3.x |
|
|
Attached Files |
|
|
|
Relationships 
