| Author | Message |
| Post Title: All PhpNuke Admins have full Admin access to Gallery2 | |
helen
Joined: Aug 23, 2005 Posts: 4
|
Posted: Mon Oct 03, 2005 10:58 pm
Hi, I am using PhpNuke7.7 (with security patches) and Gallery2 (RC2) and I have noticed that all of the nuke admins get full admin access to Gallery.
I searched to see if anyone else had the same problem and I found a link to a hack: http://mastrboy.servebeer.com/~mastrboy ... n_hack.rar Unfortunatley, the link is broken and in any case, it is for Gallery1.5. Does anyone know of a fix for Gallery2? |
| Author | Message |
| Post Title: Re: All PhpNuke Admins have full Admin access to Gallery2 | |
dari
Joined: Mar 03, 2003 Posts: 6287 Location: Washington Township, NJ, USA
|
Posted: Tue Oct 04, 2005 11:21 am
first, upgrade to G2 final.
you can manually edit the users in G2 and remove their admin priviledges. |
| Author | Message |
| Post Title: Re: All PhpNuke Admins have full Admin access to Gallery2 | |
helen
Joined: Aug 23, 2005 Posts: 4
|
Posted: Thu Oct 06, 2005 9:50 pm
Thanks, I deleted the previous G2 install and reinstalled G2 final (typical). Unfortnuately, this hasn't fixed the problem. I tried adding a completely new admin (testadmin), with no admin permissions to any nuke module. However testadmin still has full site admin access to G2 and I can't work out how to disable it. (In gallery administration, testadmin is not listed in "site admin" group).
|
| Author | Message |
| Post Title: Re: All PhpNuke Admins have full Admin access to Gallery2 | |
dari
Joined: Mar 03, 2003 Posts: 6287 Location: Washington Township, NJ, USA
|
Posted: Mon Oct 10, 2005 11:15 am
what about the individual user permissions for the user within G2?
|
| Author | Message |
| Post Title: Re: All PhpNuke Admins have full Admin access to Gallery2 | |
helen
Joined: Aug 23, 2005 Posts: 4
|
Posted: Tue Oct 11, 2005 1:07 am
Thanks for your reply, I deleted all of the g2 mysql tables and everything in /modules/gallery2.
|
| Author | Message |
| Post Title: Re: All PhpNuke Admins have full Admin access to Gallery2 | |
snorii
Joined: Oct 20, 2005 Posts: 15
|
Posted: Fri Jun 09, 2006 10:39 am
dari wrote: › first, upgrade to G2 final.
you can manually edit the users in G2 and remove their admin priviledges. I have G2 2.1.1 and I don't see any way to do this. When I go to edit that user, I can only change their username, full name, email address, language, and password. When I look under groups at "Site Admins", I only see the initial admin that I set up when Gallery2 was first installed. |
| Author | Message |
| Post Title: Re: All PhpNuke Admins have full Admin access to Gallery2 | |
alien
Joined: Mar 06, 2006 Posts: 2
|
Posted: Mon Jun 26, 2006 5:52 am
I am in the same case. Has helen solved that issue ? Is possible accomplish that whitout change php code ? I've tried some changes in tables without success. Can someone explain step by step how fix that issue?.
I also tried to change this bit of code from /modules/gallery2/index.php without succes: if (is_admin($admin)) { // we log as an admin $uid='admin'; $updateCheck = checkVersion(); I think the menaning of this fragment of code is no matter which Phpnuke Admin user you log in , it ever convert to admin g2 user. |