If someone type in:
http://yoursite.com/blogs/save/delete/id/(BlogID)
They can delete any post they want.
We build. You grow.
Get best community software hereStart a social network, a fan-site, an education project with oxwall - free opensource community software
Another Security Hole! | Forum
Purusothaman Ramanujam
Sep 9 '12
Oxwall team has been alerted about this. Thanks Steffen for finding this.
Team Den
Sep 10 '12
We've been already alerted about the issue.Thanks for reporting guys. As we update blog plugin in store, you should perform an autoupdate for blogs in your admin area.
The Forum post is edited by Den Sep 10 '12
DesignOX
Sep 11 '12
No problem Den!
I spend all my days on Oxwall now. So it is kind of imporant that it is secure.
I spend all my days on Oxwall now. So it is kind of imporant that it is secure.
DesignOX
Sep 11 '12
you could block the "path" via the init file to prevent this until they fix it :)Could you please tell me how?
