Re: Patch to add search capability

Chuck Hagenbuch <[email protected]>
Newsgroups gmane.comp.horde.ansel
Message-ID <[email protected]>
Quoting "Heath S. Hendrickson" <[email protected]>:

> It's a rather limited search functionality, but it works.

Yup! Cleaned up a bit, fixed a few things (IS and IS NOT, mainly) and 
committed.
Thanks!

> The only thing that I haven't figured out how to do is to verify
> permissions on the found images before displaying them in the final
> result set.  It's not critical, though, becasue the gallery permissions
> should deny a user from seeing the image if they don't have the correct
> permissions.  It's just an information disclosure vulnerability, for
> those of you keeping track.  I suppose I could run each image's gallery
> through a quick check, and use local caching to speed it up... I'll have
> to think about it though, and it's getting late...

Yeah, something along these lines would be good. Shouldn't be too hard to do.

-chuck

--
"Regard my poor demoralized mule!" - Juan Valdez
-- 
ansel mailing list - Join the hunt: http://horde.org/bounties/#ansel
Frequently Asked Questions: http://horde.org/faq/
To unsubscribe, mail: [email protected]
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.