[pmwiki-users] concerning GroupAttributes a potential security risk

[Hans]

Tuesday, November 4, 2008, 9:18:40 AM, Swift, Chris wrote:

> I'm using the www.pmwiki.org/wiki/Cookbook/AutoRestore
> <http://www.pmwiki.org/wiki/Cookbook/AutoRestore>  (autorestore)
> function, which will automatically restore my example.GroupAttributes
> page, the only issue with that is that someone in the system could
> potentially lock different groups for a few minutes until autorestore
> has made its way back into the system.  If anyone has a better
> suggestion, please let me know.

can you not just prevent meddling of page attributes by setting a
sitewide attr password in config.php?

$DefaultPasswords['attr'] = crypt('secret_password');

http://www.pmwiki.org/wiki/PmWiki/PasswordsAdmin


  ~Hans