View Single Post
Old June 13th, 2005, 09:13 AM   #8 (permalink)
Brian
Guest
 
Posts: n/a
Re: Is this exploit or etc ?

Quote:
Originally Posted by phoenixdown
If thats the bug posted in teh lounge at vb.org, I tried it here on vbadvanced and it seems to work. I also tried it on my forum logged out and seemed to have an effect too.
How exactly did it work here or on your forums? Did it actually allow you to moderate any images? I've just checked RC3 - 1.0.0 and you cannot validate/delete images unless you are a moderator (unless there's something I'm missing, which I don't think there is). They are correct in saying there is an error where it could allow you to moderate/delete posts though. For anyone that needs to fix this immediately, look in your gallery/moderate.php file for the following code:

Code:
Content visible to verified customers only.
Just Above that, Add:
Code:
Content visible to verified customers only.