Bug in configuration (config.php and spread)
Posted: Fri Aug 08, 2014 8:02 am
Although in both config.php there is a setting for image folder
define('DIR_IMAGE', '/home/esoftw5/public_html/me3d.us/me3d.us/image/');
so apparently one could:
define('DIR_IMAGE', '/home/esoftw5/public_html/me3d.us/me3d.us/PRIVATEIMAGEFOLDERNAME/');
In fact, it is hard coded in dozens of places that the URL is generated with the string 'image/',
so renaming the image folder for privacy/security is not practical.
Here is an example:
if (isset($this->request->server['HTTPS']) && (($this->request->server['HTTPS'] == 'on') || ($this->request->server['HTTPS'] == '1'))) {
return HTTPS_CATALOG . 'image/' . $new_image;
} else {
return HTTP_CATALOG . 'image/' . $new_image;
}
The code is littered with this construct.
define('DIR_IMAGE', '/home/esoftw5/public_html/me3d.us/me3d.us/image/');
so apparently one could:
define('DIR_IMAGE', '/home/esoftw5/public_html/me3d.us/me3d.us/PRIVATEIMAGEFOLDERNAME/');
In fact, it is hard coded in dozens of places that the URL is generated with the string 'image/',
so renaming the image folder for privacy/security is not practical.
Here is an example:
if (isset($this->request->server['HTTPS']) && (($this->request->server['HTTPS'] == 'on') || ($this->request->server['HTTPS'] == '1'))) {
return HTTPS_CATALOG . 'image/' . $new_image;
} else {
return HTTP_CATALOG . 'image/' . $new_image;
}
The code is littered with this construct.