Skip to main content
Topic: Admin security check even if not admin (Read 2866 times) previous topic - next topic
0 Members and 1 Guest are viewing this topic.

Admin security check even if not admin

I am trying to find everything I can both to make you mad and to help you, sorry if you see any errors caused by me in the logs.

Besides, when trying to access action=admin it asks me for the password twice, which is of course the double check when trying to access the admin section. It shouldn't be asking it in the first place as I'm not admin.
~ SimplePortal Support Team ~

Re: 2 issues with admin area

Reply #1

The back button, you say, does not take you back...
Well, how about telling us, where it does take you?

Re: Admin security check even if not admin

Reply #2

Quote from: Burke Knight – The back button, you say, does not take you back...
Well, how about telling us, where it does take you?
Nowhere. It refreshes the page. I am opening another topic because it happens not only with the action=admin but also action=moderate and I have the feeling it happens all over the place.
~ SimplePortal Support Team ~

Re: Admin security check even if not admin

Reply #3

To be considered.
I think there are no security implications in exchanging the checks, but better have a second look.
Bugs creator.
Features destroyer.
Template killer.

Re: Admin security check even if not admin

Reply #4

Yeah I think that if you just switch the order it's going to be fine :)
~ SimplePortal Support Team ~

 

Re: Admin security check even if not admin

Reply #5

@emanuele bump ;)
~ SimplePortal Support Team ~