for sale by unregistered ??

Marshal Halloway · January 3rd, 2006, 01:48 PM

A user uploaded an ad today and the ad shows it is on sale by Unregistered. It links to my account member.php?uid=0 .

The ad is posted as an auction.

How is this possible ?

Chuck S · January 3rd, 2006, 01:52 PM

Looks to me like you have unregistered users set to be able to upload

It is not linking to your account as you would be userid 1. Example below from my test system.

http://www.omegatron.net/pp-classifi...mber.php?uid=0

http://www.omegatron.net/pp-classifi...mber.php?uid=1

Check your usergroup permissions and make sure your not letting unregistered users upload.

I don't off hand see any issue looking at your forum as in I am not able to upload as an unregistered user but worth checking.

Marshal Halloway · January 3rd, 2006, 02:52 PM

Only the forum's registered user groups show up in
PhotoPost Classifieds UserGroup, so I am not able to deny access.

However, as a not logged in member, there is no way to get to the Place and ad link. I even tried entering uploadproduct.php when I was logged off the forum and I was then redirected to the Classifieds Login page.

Chuck S · January 3rd, 2006, 03:26 PM

Here is an attachment of what I see. You should have a guests group and set this to no for uploads. Here is a query you can run in phpmyadmin if you dont have that group

INSERT INTO pp_usergroups (groupid,groupname,modaccess,cpaccess,uploads,comments,editpho,editposts,reqmod,highlight,bold,italic,payment) VALUES('100','Guests',0,0,0,0,0,0,0,0,0,0,0);

Marshal Halloway · January 9th, 2006, 10:23 PM

It happened again and after I made sure I had ('100','Guests',0,0,0,0,0,0,0,0,0,0,0);
as permission for guests.

I have checked everything and cannot find out why.

Both the incidents have been reported by the posters themselves and they claim they were logged in when it happened. They have both reposted the ad and with success, so somehow there is a glitch somewhere.

Chuck S · January 10th, 2006, 08:26 AM

Most likely to do with the authentication and 1.1

Marshal Halloway · January 10th, 2006, 10:15 AM

I was open to that in the beginning, but...

Out of 42 ads placed, this has now happened 2 times plus with 1 comment.

The user has to be logged in and as one said, his user name was on the screen when he placed the ad and after he uploaded the ad, it came out as unregistered.

No guests or not logged in members have access to upload or comments, so I find it strange that authentication should stop working "now and then".

Chuck S · January 10th, 2006, 10:54 AM

Well No one has posted this running 1.05

The authentication routine is totally different in 1.1 meaning the only thing keeping you logged in with Photopost products right now is the sessionid cookie. If that is dropped or expires I can see this happening.

This is why I state I am looking at redoing the routines and making 1.1 compatible so we can replace our integration files when 1.1 goes gold cause if the session drops you are backwards authenticated by the user password so that you are logged in. Right now you don't have this since the password authentication does not work because of the differences in the SMFCookie is different so your only authenticating by session only.

Marshal Halloway · January 10th, 2006, 11:08 AM

That sounds right.

I guess we have to put a pressure on SMF about the gold version...

Chuck S · January 10th, 2006, 11:19 AM

LOL well don't put too much pressure now it will most likely take me a week or two to work out 1.1 authentication.

I will send you though any updated files should I work it out before they reach a gold status just as a courtesy since your a customer.

Marshal Halloway · January 10th, 2006, 11:24 AM

Thanks! Your service is outstanding.