Bug: Displaying Aunauthorized Pictures

[sdf1981cgn]

There is a bug in

Code: Select all

PhocaGalleryImageFront::getRandomImageRecursive()

It displays random image from any sub-category, even if this sub-category should be inaccessible to the current user.
This renders the option "show random image as category-preview" useless for me.

Example (accessible, inaccesible):

• root <-- you are here and see a random image as preview for cat1
  • cat1 <-- has no images
    • cat1.1 <-- has no images
      • a lot of categories with images here
    • cat1.2 <-- has no images
      • a lot of categories with images here

The random image now can be one in the inaccessible categories in cat1.2

There are probably simpler examples, this is just an excerpt from a real-life usage.

[Jan]

Hi, thank you for this info, please let me know which version you are using and which file you mean, thank you, Jan

[sdf1981cgn]

Hi!

It's PhocaGallery 3.0.0 final with J1.6.3 and the method and class is in file administrator/components/com_phocagallery/libraries/phocagallery/image/imagefront.php

Kind regards, Simon

[Jan]

Hi, thank you for the info, I will take a look at it.

Jan

[Jan]

Hi, fixed in 3.0.1

Jan