Ticket #221 (closed defect: fixed)

Opened 2 years ago

Last modified 2 years ago

authorization don't work on windows

Reported by: srabol@… Owned by: xue
Priority: urgent Milestone: 3.0.2
Component: Prado Framework v3 Version: 3.0
Severity: major Keywords:
Cc:

Description

It's possible to by-pass the authorization on pages if you type in a URL e.g http://prado.rabol.dyndns.org/demos/blog/index.php/page,Posts.newpost will allow you to create a new post in the Blog demo even if not logged in

Change History

Changed 2 years ago by xue

  • status changed from new to closed
  • resolution set to fixed
  • milestone set to 3.0.2

Thanks!

Note: See TracTickets for help on using tickets.