Jump to content

remove login from upgrader

Featured Replies

Posted

if we are in acp and click update for an app why the need to login again?


if we are in acp and click update for an app why the need to login again?



NO.
/admin/upgrade is accessible without visiting the ACP first.
NO.
bad idea.... very very insecure.
if apps had a separate up-grader, sure... they do not.... they use the IPB Upgrader... that would be a hazard.
I personally consider it more a feature than an annoyance frankly... last thing one would want is somebody having unauthorized access to the upgrader.
  • Author

I see your point but if already logged in why can't it treat you as logged in?
cookie is already there from the acp session.
its just irritating to login, click button, then login again.

if going the manual route you're not logged in so it should of course req a login. not advocating that being removed, my title was probably misleading there.

Ah, I gather your meaning now.... I think the upgrader purposely uses a completely different session though.... for similar security reasons... I could be wrong.

  • Author

it does seem that, guess I am basically asking if the sessions could be tied for convenience sake here.

  • Management

It's a security thing. I don't think it's that inconvenient to type in your login when you only run the upgrade routines at most a few times a year :)

You can't even log in to the acp if there are update files? I know on my test board if I upload the new files and go to acp it automatically takes me to the upgrader

  • Author

few times a year? try again LOL
its about once a week on average, maybe twice, because of the apps.
and before I do an update I am in acp usually before starting upload as I am doing backups or disabling stuff as needed.
so your there, hit update, have to log in again, update finishes and takes you to page where you can't even go back to acp from. so you have to manually goto acp again and...yup...log in again.
yeah thats not in the least bit irritating.


:ph34r: would help at least... I do see his point.
  • Author

I do the new tab for it often, sometimes I forget though so there is a little work around there.
people with disabilities/injuries notice these little things a bit more...and get perturbed by them :D

  • Author

tried to add to above post, got

Fatal error: Class 'PSDebug' not found in /home/forumsi/public_html/admin/applications/forums/sources/classes/post/classPost.php on line 3109


error.

was going to say if this IS needed for security and cannot be edited thats one thing, I'm just asking it be considered.

Archived

This topic is now archived and is closed to further replies.

Recently Browsing 0

  • No registered users viewing this page.