Ticket #174 (closed バグ指摘: 無効)

Opened 13 years ago

Last modified 12 years ago

html/admin/contents/file_view.php で html/user_data 以下のファイルが自由に閲覧できてしまう

Reported by: nanasess Owned by: somebody
Priority: Milestone: EC-CUBE
Component: 管理画面 Version: 1.3系
Keywords: Cc:
修正済み:

Description

source:branches/rel/html/admin/contents/file_view.php@12157

  • ユーザー認証が無いため, 誰でも html/user_data 以下のファイルが閲覧できてしまう.

Change History

comment:1 Changed 13 years ago by nanasess

  • Component changed from フロント to 管理画面

comment:2 Changed 12 years ago by takegami

  • Status changed from new to closed
  • Resolution set to 無効
Note: See TracTickets for help on using tickets.