Invision Community 4: SEO, prepare for v5 and dormant account notifications Matt November 11, 2024Nov 11
May 9, 201212 yr if we are in acp and click update for an app why the need to login again? NO. /admin/upgrade is accessible without visiting the ACP first. NO. bad idea.... very very insecure. if apps had a separate up-grader, sure... they do not.... they use the IPB Upgrader... that would be a hazard. I personally consider it more a feature than an annoyance frankly... last thing one would want is somebody having unauthorized access to the upgrader.
May 9, 201212 yr Author I see your point but if already logged in why can't it treat you as logged in? cookie is already there from the acp session. its just irritating to login, click button, then login again. if going the manual route you're not logged in so it should of course req a login. not advocating that being removed, my title was probably misleading there.
May 9, 201212 yr Ah, I gather your meaning now.... I think the upgrader purposely uses a completely different session though.... for similar security reasons... I could be wrong.
May 9, 201212 yr Author it does seem that, guess I am basically asking if the sessions could be tied for convenience sake here.
May 9, 201212 yr Management It's a security thing. I don't think it's that inconvenient to type in your login when you only run the upgrade routines at most a few times a year :)
May 9, 201212 yr You can't even log in to the acp if there are update files? I know on my test board if I upload the new files and go to acp it automatically takes me to the upgrader
May 9, 201212 yr Author few times a year? try again LOL its about once a week on average, maybe twice, because of the apps. and before I do an update I am in acp usually before starting upload as I am doing backups or disabling stuff as needed. so your there, hit update, have to log in again, update finishes and takes you to page where you can't even go back to acp from. so you have to manually goto acp again and...yup...log in again. yeah thats not in the least bit irritating.
May 9, 201212 yr Author I do the new tab for it often, sometimes I forget though so there is a little work around there. people with disabilities/injuries notice these little things a bit more...and get perturbed by them :D
May 9, 201212 yr Author tried to add to above post, gotFatal error: Class 'PSDebug' not found in /home/forumsi/public_html/admin/applications/forums/sources/classes/post/classPost.php on line 3109 error. was going to say if this IS needed for security and cannot be edited thats one thing, I'm just asking it be considered.
Archived
This topic is now archived and is closed to further replies.