This has never happened before but here goes. I just moved my website to
a new hosting site. I just entered a bad admin login name and correct
password. It let me open up that page for editing. So I tried to enter a
makeup userid and makeup password. It let me open up the editor for
editing that page. I am not sure how this is happening.
I just noticed that I had 30 user on my website. I just put a .htaccess
file in the root to block anyone until I get this problem fixed.
Nothing have changed I have this:
- this in my config:
$DefaultPasswords['admin']='$1$Pw1cjg06$9VgqESpEGt1WLCJPgr/3J.';
$DefaultPasswords['attr']= '$1$Pw1cjg06$9VgqESpEGt1WLCJPgr/3J.';
$DefaultPasswords['edit']= '$1$Pw1cjg06$9VgqESpEGt1WLCJPgr/3J.';
$HandleAuth['diff'] = 'edit';
- authuser plugin
The only thing I can think of is that per a question I had here the
other day in another thread "Problems adding my pmWiki to a different ISP".
I modify the permissions of wiki.d/ so they're 777 instead of 775.
--
Thanks in Advance... http://weconsul.zendurl.com
IchBin, Pocono Lake, Pa, USA http://ichbinquotations.awardspace.com
______________________________________________________________________
'If there is one, Knowledge is the "Fountain of Youth"'
-William E. Taylor, Regular Guy (1952-)
_______________________________________________
pmwiki-users mailing list
[email protected]
http://www.pmichaud.com/mailman/listinfo/pmwiki-users
