Non Logged Users can Initiate an image Upload

Question

Non Logged Users can Initiate an image Upload

3.47K viewsNovember 1, 2015Issues

1

Cagliostro 4.19K Posted October 27, 2015

While i only allowed logged in users to upload images, it seems that anonymous can Initiate an upload. At the end the upload is not accepted BUT also a wrong warning is displayed (about size but the image less than the allowed size).

Attachments

Untitled.png

Cagliostro commented October 27, 2015

I think that Anonymous users shouldn’t even see the Upload option, if the setup is set not to allow non-logged users to upload.

1 Answer

I think that Anonymous users shouldn’t even see the Upload option, if the setup is set not to allow non-logged users to upload.

score 1 · Answer 1 · 2015-11-01T21:45:41+00:00

1

Rahul Aryan 30.96K Posted November 1, 2015 1 Comment

A fix has been pushed to GitHub repo.

Cagliostro commented November 1, 2015

It is fixed partially but in the wrong way i think. The non-logged user CAN still initiate the upload but at the end he gets an permission error.

Why not do it as in Question Reply. HIDE the upload when not-logged.

Attachments

1 Answer

Resources