[Pmwiki-users] security problem -> edit password

lists@basel-inside.ch lists
Fri Jan 23 05:11:18 CST 2004


> Just the moment i found a mysterious thing.

> Some of my pages i have secured with a password on read-level. This works so
> far fine but if i add the param =edit directly to the uri then i can read
> the contents of the secured page without being asked for a password.
>
> Is this a known problem?
>
> What can i do to workaround this?

A read password doesn't imply a edit protection,
you have to set an edit password as well.

pog



More information about the pmwiki-users mailing list