The following warnings occurred:
Warning [2] Undefined variable $unreadreports - Line: 26 - File: global.php(961) : eval()'d code PHP 8.2.25 (Linux)
File Line Function
/global.php(961) : eval()'d code 26 errorHandler->error
/global.php 961 eval
/printthread.php 16 require_once



UserSpice
Security issue - Printable Version

+- UserSpice (https://userspice.com/forums)
+-- Forum: General (https://userspice.com/forums/forumdisplay.php?fid=20)
+--- Forum: New to UserSpice? (https://userspice.com/forums/forumdisplay.php?fid=22)
+--- Thread: Security issue (/showthread.php?tid=302)



Security issue - tudtude - 10-06-2016

Dear team,

Your open code is very cool, it help many people save thire time. I just have some question about security. Is it sucurity enouch to have a single place for login both of user and admin level? Please let me know about your idea about this issue.

Thanks,
Tudtude


Security issue - mudmin - 10-06-2016

I don't see any security vulnerability there. If you don't have the proper credentials, you cannot see the "important" places that need to be kept secure. If your userId does not match that of an admin, you can't see anything regardless of where the login form is held.

Glad you're enjoying the code!


Security issue - tudtude - 10-06-2016

Dear Mudmin, thank you for your answer.