Topic Title: All PhpNuke Admins have full Admin access to Gallery2

Forum Index » Gallery 2 Integration » All PhpNuke Admins have full Admin access to Gallery2
Topic URL: http://www.nukedgallery.net/postt1986.html

AuthorMessage
Post Title: All PhpNuke Admins have full Admin access to Gallery2
helen
Joined: Aug 23, 2005
Posts: 4

Posted: Mon Oct 03, 2005 10:58 pm
Hi, I am using PhpNuke7.7 (with security patches) and Gallery2 (RC2) and I have noticed that all of the nuke admins get full admin access to Gallery.

I searched to see if anyone else had the same problem and I found a link to a hack:
http://mastrboy.servebeer.com/~mastrboy ... n_hack.rar

Unfortunatley, the link is broken and in any case, it is for Gallery1.5.

Does anyone know of a fix for Gallery2?

AuthorMessage
Post Title: Re: All PhpNuke Admins have full Admin access to Gallery2
dari
Joined: Mar 03, 2003
Posts: 6287
Location: Washington Township, NJ, USA
Posted: Tue Oct 04, 2005 11:21 am
first, upgrade to G2 final.

you can manually edit the users in G2 and remove their admin priviledges.

AuthorMessage
Post Title: Re: All PhpNuke Admins have full Admin access to Gallery2
helen
Joined: Aug 23, 2005
Posts: 4

Posted: Thu Oct 06, 2005 9:50 pm
Thanks, I deleted the previous G2 install and reinstalled G2 final (typical). Unfortnuately, this hasn't fixed the problem. I tried adding a completely new admin (testadmin), with no admin permissions to any nuke module. However testadmin still has full site admin access to G2 and I can't work out how to disable it. (In gallery administration, testadmin is not listed in "site admin" group).

AuthorMessage
Post Title: Re: All PhpNuke Admins have full Admin access to Gallery2
dari
Joined: Mar 03, 2003
Posts: 6287
Location: Washington Township, NJ, USA
Posted: Mon Oct 10, 2005 11:15 am
what about the individual user permissions for the user within G2?

AuthorMessage
Post Title: Re: All PhpNuke Admins have full Admin access to Gallery2
helen
Joined: Aug 23, 2005
Posts: 4

Posted: Tue Oct 11, 2005 1:07 am
Thanks for your reply, I deleted all of the g2 mysql tables and everything in /modules/gallery2.

AuthorMessage
Post Title: Re: All PhpNuke Admins have full Admin access to Gallery2
snorii
Joined: Oct 20, 2005
Posts: 15

Posted: Fri Jun 09, 2006 10:39 am
dari wrote: › first, upgrade to G2 final.

you can manually edit the users in G2 and remove their admin priviledges.


I have G2 2.1.1 and I don't see any way to do this.

When I go to edit that user, I can only change their username, full name, email address, language, and password.

When I look under groups at "Site Admins", I only see the initial admin that I set up when Gallery2 was first installed.

AuthorMessage
Post Title: Re: All PhpNuke Admins have full Admin access to Gallery2
alien
Joined: Mar 06, 2006
Posts: 2

Posted: Mon Jun 26, 2006 5:52 am
I am in the same case. Has helen solved that issue ? Is possible accomplish that whitout change php code ? I've tried some changes in tables without success. Can someone explain step by step how fix that issue?.

I also tried to change this bit of code from /modules/gallery2/index.php without succes:

if (is_admin($admin)) {
// we log as an admin
$uid='admin';
$updateCheck = checkVersion();

I think the menaning of this fragment of code is no matter which Phpnuke Admin user you log in , it ever convert to admin g2 user.

All times are GMT - 5 Hours
Powered by PHPNuke and phpBB2 © 2006 phpBB Group