CMS MADE SIMPLE FORGE

Secure file download

 

[#8538] Script update

avatar
Created By: manuel (manuel)
Date Submitted: Wed Oct 17 15:35:37 -0400 2012

Assigned To: Jonathan Schmid (Foaly*)
Version: v1.0
CMSMS Version: 1.11.2
Severity: Critical
Resolution: None
State: Open
Summary:
Script update
Detailed Description:
Dear Foaly,

Thanks for sharing this great script!
Just wanted to let you know it needs an update to work with the latest cmsms
releases.

Replace
   global $gCms;
by
  $gCms = cmsms();

Replace
  $feusers = $gCms->modules['FrontEndUsers']['object'];
by
  $feusers = cms_utils::get_module('FrontEndUsers');

The script wasn't correctly validating the FEU any more but doesn't produce an
error.
It just deliveres the file without validating the FEU when someone calls the
obfusticated URL.

If someone updates his/her CMSMS and tests the downloads by calling the file
after logging in, everything will work just fine but they might not be aware
that the FEU validation is no longer working...

Greetings,
Manuel


History

Updates

Updated: 2013-02-28 11:08
resolution_id: => 5
severity_id: 3 => 1