[Top][All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Demexp-dev] Two questions: account password change and PHP allow_url_fo
From: |
David MENTRE |
Subject: |
[Demexp-dev] Two questions: account password change and PHP allow_url_fopen requirement |
Date: |
Sun, 22 Oct 2006 19:58:05 +0200 |
User-agent: |
Gnus/5.1006 (Gnus v5.10.6) Emacs/21.4 (gnu/linux) |
Hello Augustin,
I have two questions related to your code and Drupal:
1. Is it possible for the demexp admin in Drupal to change the demexp
password of a Drupal user? It happens that demexp users loose their
passwords and I need to be able to give them a new one.
2. Can Drupal and your demexp module work with allow_url_fopen
disabled? It is apparently the cause of a great number of recent
attacks:
http://lwn.net/Articles/203086/
Remote file inclusion vulnerabilities
Best wishes,
d.
--
GPG/PGP key: A3AD7A2A David MENTRE <address@hidden>
5996 CC46 4612 9CA4 3562 D7AC 6C67 9E96 A3AD 7A2A
- [Demexp-dev] Two questions: account password change and PHP allow_url_fopen requirement,
David MENTRE <=