demexp-dev
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Demexp-dev] Two questions: account password change and PHP allow_url_fo


From: David MENTRE
Subject: [Demexp-dev] Two questions: account password change and PHP allow_url_fopen requirement
Date: Sun, 22 Oct 2006 19:58:05 +0200
User-agent: Gnus/5.1006 (Gnus v5.10.6) Emacs/21.4 (gnu/linux)

Hello Augustin,

I have two questions related to your code and Drupal:

 1. Is it possible for the demexp admin in Drupal to change the demexp
    password of a Drupal user? It happens that demexp users loose their
    passwords and I need to be able to give them a new one.

 2. Can Drupal and your demexp module work with allow_url_fopen
    disabled? It is apparently the cause of a great number of recent
    attacks: 
      http://lwn.net/Articles/203086/
      Remote file inclusion vulnerabilities

Best wishes,
d.
-- 
GPG/PGP key: A3AD7A2A David MENTRE <address@hidden>
 5996 CC46 4612 9CA4 3562  D7AC 6C67 9E96 A3AD 7A2A




reply via email to

[Prev in Thread] Current Thread [Next in Thread]