MyBBHacks.com Plugins for  MyBB
0
Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
User category
#11
(07-23-2022, 11:03 PM)MyBBHacks Wrote: I checked the download file and changes are there.
Did you replace the ezgallery.php and ezgalleryuser.php in the root of your mybb install with the ones from the zip file?

So sorry hacks, I am such a clutz! I did forget all those extra files, concentrating too much on the folders I think! Doh!

It's now all working correctly except for one last thing. Its only a small thing I can live with because not many, if anyone would really do it. It it can be done!

If you copy and paste this link: http://mylovedoll.uk/ezgallery.php?su=user&cat=2&u=1 into the address bar, you are stopped from seeing the users private gallery. However, just change the last number and you are into the users private gallery and can see all the thumbnails of the images. However you can't open an image.

This is the only thing now that I can find.  Well done on your work, outstanding. If you can fix great, but if not its still 98% secure Wink

Tagcloud now doesn't show new private images, and the icon on images doesn't open private gallerys Smile Great!

I do have a couple more request as I get deeper into the use of the gallery, but these aren't private vulnerabilities so I'll put them in feature request, if that's OK?  I'll also do some tests on passwords tonight.

Gary
Reply
#12
I found another little bug that could do with looking at.

If a member is on ignore list, they can still pester the member that ignored them through the gallery comments.

If a member is on ignore list can we block in gallery comments too?

Many thanks
Gary
Reply
#13
I guess for the last one. What should happen? Be blocked from leaving comments?
Like what I do? Support me at https://www.patreon.com/vbgamer45/
Reply
#14
Posted update to fix a couple ways to disclose private gallery information. Fixes included in latest download.
Like what I do? Support me at https://www.patreon.com/vbgamer45/
Reply
#15
(07-24-2022, 09:25 AM)MyBBHacks Wrote: I guess for the last one. What should happen? Be blocked from leaving comments?

Yes i think that would be good not to be able to leave a comment on the members photos whom ignored them. If you changed it so that members can turn off comments, then to the ignored person it would look like the owner had turned comments off on that image. Big Grin
Reply
#16
(07-24-2022, 01:25 PM)MyBBHacks Wrote: Posted update to fix a couple ways to disclose private gallery information. Fixes included in latest download.

That works a treat, thanks Hacks.
Reply


Forum Jump:


Users browsing this thread: 1 Guest(s)