All PhpNuke Admins have full Admin access to Gallery2

helen · Beginner Joined: Aug 23, 2005 Posts: 4

Hi, I am using PhpNuke7.7 (with security patches) and Gallery2 (RC2) and I have noticed that all of the nuke admins get full admin access to Gallery.

I searched to see if anyone else had the same problem and I found a link to a hack:
http://mastrboy.servebeer.com/~mastrboy ... n_hack.rar

Unfortunatley, the link is broken and in any case, it is for Gallery1.5.

Does anyone know of a fix for Gallery2?

AdBot

dari

first, upgrade to G2 final.

you can manually edit the users in G2 and remove their admin priviledges.

helen · Beginner Joined: Aug 23, 2005 Posts: 4

Thanks, I deleted the previous G2 install and reinstalled G2 final (typical). Unfortnuately, this hasn't fixed the problem. I tried adding a completely new admin (testadmin), with no admin permissions to any nuke module. However testadmin still has full site admin access to G2 and I can't work out how to disable it. (In gallery administration, testadmin is not listed in "site admin" group).

dari

what about the individual user permissions for the user within G2?

helen · Beginner Joined: Aug 23, 2005 Posts: 4

Thanks for your reply, I deleted all of the g2 mysql tables and everything in /modules/gallery2.

snorii · Beginner Joined: Oct 20, 2005 Posts: 15

dari wrote: › first, upgrade to G2 final.

you can manually edit the users in G2 and remove their admin priviledges.

I have G2 2.1.1 and I don't see any way to do this.

When I go to edit that user, I can only change their username, full name, email address, language, and password.

When I look under groups at "Site Admins", I only see the initial admin that I set up when Gallery2 was first installed.

alien · Beginner Joined: Mar 06, 2006 Posts: 2

I am in the same case. Has helen solved that issue ? Is possible accomplish that whitout change php code ? I've tried some changes in tables without success. Can someone explain step by step how fix that issue?.

I also tried to change this bit of code from /modules/gallery2/index.php without succes:

if (is_admin($admin)) {
// we log as an admin
$uid='admin';
$updateCheck = checkVersion();

I think the menaning of this fragment of code is no matter which Phpnuke Admin user you log in , it ever convert to admin g2 user.