|Posted: Tue, 2003-04-01 00:35|
I'm using Gallery remote v1.0 and gallery 1.3.3 and have created an account on my server for my girlfriend to upload pictures. I changed the permissions on my albums so only the administrator account can make changes or additions. I created an album that she has full control over. When managing the gallery from the web interface the permissions are enforced, but when she adds pics/albums from gallery remote she is able to add things to my galleries.
The gallery remote interface shows my albums as being read only, but doesn't enforce it at all. I figure that people are already aware of this, but it never hurts to speak up
I am running openbsd 3.2-stable and compiled netpbm-9.24, PHP v4.2.3 and unzip-5.50 from the ports snapshot. Apache is 1.3.26 but patched with all of the latest security patches, and is running in an unchrooted environment.