Users editing their own details

Author Message

Tony Wood

Sunday 18 May 2003 11:10:46 am

SNIP

Tony Wood : twitter.com/tonywood
Vision with Technology
Experts in eZ Publish consulting & development

Power to the Editor!

Free eZ Training : http://www.VisionWT.com/training
eZ Future Podcast : http://www.VisionWT.com/eZ-Future

Selmah Maxim

Monday 19 May 2003 12:19:40 am

Hi ..

check the permissions for users !

Tony Wood

Monday 19 May 2003 12:41:06 am

SNIP

Tony Wood : twitter.com/tonywood
Vision with Technology
Experts in eZ Publish consulting & development

Power to the Editor!

Free eZ Training : http://www.VisionWT.com/training
eZ Future Podcast : http://www.VisionWT.com/eZ-Future

Selmah Maxim

Monday 19 May 2003 2:37:18 am

peeb

Gabriel Ambuehl

Monday 19 May 2003 2:40:32 am

Selmah,
read http://ez.no/developer/ez_publish_3/bug_reports/urgent_security_risk_privilege_escalation_in_default_install

as to why the demo uses the IMHO braindead setup it does, I have no idea.

Visit http://triligon.org

Selmah Maxim

Monday 19 May 2003 2:41:03 am

beep

Tony Wood

Monday 19 May 2003 2:42:02 am

SNIP

Tony Wood : twitter.com/tonywood
Vision with Technology
Experts in eZ Publish consulting & development

Power to the Editor!

Free eZ Training : http://www.VisionWT.com/training
eZ Future Podcast : http://www.VisionWT.com/eZ-Future

Tony Wood

Monday 19 May 2003 2:45:48 am

SNIP

Tony Wood : twitter.com/tonywood
Vision with Technology
Experts in eZ Publish consulting & development

Power to the Editor!

Free eZ Training : http://www.VisionWT.com/training
eZ Future Podcast : http://www.VisionWT.com/eZ-Future

Selmah Maxim

Monday 19 May 2003 2:49:15 am

beep

Selmah Maxim

Monday 19 May 2003 2:53:18 am

beep

Selmah Maxim

Monday 19 May 2003 2:58:14 am

the bug that edit.php must check the user id in the session and the requested user id !

Tony Wood

Monday 19 May 2003 3:02:23 am

SNIP

Tony Wood : twitter.com/tonywood
Vision with Technology
Experts in eZ Publish consulting & development

Power to the Editor!

Free eZ Training : http://www.VisionWT.com/training
eZ Future Podcast : http://www.VisionWT.com/eZ-Future

Selmah Maxim

Monday 19 May 2003 3:04:08 am

yeah ...
how did ez team didn`t check this bug ... i think all ez sites is buged !

Tony Wood

Monday 19 May 2003 3:08:54 am

This is a problem i will not discuss further here as it have some issues.... Also can you remove reference to if from your messages as a fix needs to be provided ASAP for this...

Tony Wood : twitter.com/tonywood
Vision with Technology
Experts in eZ Publish consulting & development

Power to the Editor!

Free eZ Training : http://www.VisionWT.com/training
eZ Future Podcast : http://www.VisionWT.com/eZ-Future

Selmah Maxim

Monday 19 May 2003 3:09:34 am

opppsss ...

I think better if one of editors close, or delete this forum !

Tony Wood

Monday 19 May 2003 3:14:31 am

Selmah,

Please remove your references to the problem till a fix can be provided.

eZ, please remove this forum thread so versions are not available.

Tony

Tony Wood : twitter.com/tonywood
Vision with Technology
Experts in eZ Publish consulting & development

Power to the Editor!

Free eZ Training : http://www.VisionWT.com/training
eZ Future Podcast : http://www.VisionWT.com/eZ-Future

Selmah Maxim

Monday 19 May 2003 3:21:18 am

btw ..

i found something else, bigger bug, found while am testing on my localhost, this bug make ez32 admin interface open for guests !

Tony Wood

Monday 19 May 2003 3:22:31 am

email it to webmaster@ez.no.

Do not place on the forum..

Tony Wood : twitter.com/tonywood
Vision with Technology
Experts in eZ Publish consulting & development

Power to the Editor!

Free eZ Training : http://www.VisionWT.com/training
eZ Future Podcast : http://www.VisionWT.com/eZ-Future

Tony Wood

Monday 19 May 2003 3:23:50 am

Good eye though Selmah, you should be on the eZ security advisory :)

Tony Wood : twitter.com/tonywood
Vision with Technology
Experts in eZ Publish consulting & development

Power to the Editor!

Free eZ Training : http://www.VisionWT.com/training
eZ Future Podcast : http://www.VisionWT.com/eZ-Future

Selmah Maxim

Monday 19 May 2003 3:27:55 am

thx :)

but is sad that ez have such bug :(

Powered by eZ Publish™ CMS Open Source Web Content Management. Copyright © 1999-2014 eZ Systems AS (except where otherwise noted). All rights reserved.

eZ debug

Timing: Jan 18 2025 11:44:21
Script start
Timing: Jan 18 2025 11:44:21
Module start 'layout'
Timing: Jan 18 2025 11:44:21
Module start 'content'
Timing: Jan 18 2025 11:44:23
Module end 'content'
Timing: Jan 18 2025 11:44:23
Script end

Main resources:

Total runtime1.4681 sec
Peak memory usage4,096.0000 KB
Database Queries128

Timing points:

CheckpointStart (sec)Duration (sec)Memory at start (KB)Memory used (KB)
Script start 0.00000.0086 587.9141152.6250
Module start 'layout' 0.00860.0038 740.539139.4453
Module start 'content' 0.01241.4540 779.9844746.7734
Module end 'content' 1.46640.0017 1,526.757832.1641
Script end 1.4681  1,558.9219 

Time accumulators:

 Accumulator Duration (sec) Duration (%) Count Average (sec)
Ini load
Load cache0.00370.2491160.0002
Check MTime0.00160.1059160.0001
Mysql Total
Database connection0.00100.071510.0010
Mysqli_queries1.365192.98451280.0107
Looping result0.00110.07791260.0000
Template Total1.425897.120.7129
Template load0.00210.145820.0011
Template processing1.423696.969720.7118
Template load and register function0.00010.007410.0001
states
state_id_array0.00110.072110.0011
state_identifier_array0.00190.127220.0009
Override
Cache load0.00200.1370620.0000
Sytem overhead
Fetch class attribute can translate value0.00070.050530.0002
Fetch class attribute name0.00130.0914210.0001
XML
Image XML parsing0.00070.046130.0002
class_abstraction
Instantiating content class attribute0.00010.0038290.0000
General
dbfile0.00120.0808160.0001
String conversion0.00000.000740.0000
Note: percentages do not add up to 100% because some accumulators overlap

Templates used to render the page:

UsageRequested templateTemplateTemplate loadedEditOverride
1node/view/full.tplfull/forum_topic.tplextension/sevenx/design/simple/override/templates/full/forum_topic.tplEdit templateOverride template
9content/datatype/view/ezimage.tpl<No override>extension/sevenx/design/simple/templates/content/datatype/view/ezimage.tplEdit templateOverride template
20content/datatype/view/ezxmltext.tpl<No override>extension/community_design/design/suncana/templates/content/datatype/view/ezxmltext.tplEdit templateOverride template
20content/datatype/view/ezxmltags/paragraph.tpl<No override>extension/ezwebin/design/ezwebin/templates/content/datatype/view/ezxmltags/paragraph.tplEdit templateOverride template
2content/datatype/view/ezxmltags/line.tpl<No override>design/standard/templates/content/datatype/view/ezxmltags/line.tplEdit templateOverride template
1print_pagelayout.tpl<No override>extension/community/design/community/templates/print_pagelayout.tplEdit templateOverride template
 Number of times templates used: 53
 Number of unique templates used: 6

Time used to render debug report: 0.0001 secs