Download & Extend

Prevent Anon. Users from Creating Bogus Images and filling Files/Textimage folder

Project:Textimage
Version:5.x-2.x-dev
Component:Miscellaneous
Category:feature request
Priority:critical
Assigned:Unassigned
Status:closed (fixed)

Issue Summary

is there a way to do that?
I tried with access controls/permissions but that doesn't help. It's bad when everyone can create false images just by going to the sitename.com/files/textimage/presetname/blsdgsdg.png

Comments

#1

Category:support request» feature request

I will look into an option for this, however if such a feature was introduced it could have certain undesirable side-effects; If you had your site configured to use a Textimage preset for headings, such as comment titles, and an anonymous user made a comment, the heading would not be generated.

I guess I could implement a permission and have it set to all by default, allowing those who wish to disable full access at their own risk.

#2

Version:5.x-2.0» 5.x-2.x-dev
Status:active» fixed

A solution has been committed to HEAD, DRUPAL-6--2 and DRUPAL-5--2.

By default the permission 'create textimages' is off for anyone but user 1, this means that anonymous users can not create new url based (/files/textimage/preset/text.png) textimages.
However, if you want Textimages to be created dynamically, you can still use the CCK or theme() methods.

#3

Status:fixed» closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.