Thread: The whole world can see and rate photos????

A friend just informed me that the whole world can use the rate photos even if they are not a user or signed in, so anyone from anywhere can click on Rate Photos and see every photo including the private ones. Anyone know why and what to do to stop this? I am really getting discouraged.

This is not really a bug.... as rate.php has never required a user to login - and it limits rating by IP address (one per photo)

Just edit your auth in rate.php per your requirements:

Code:

if ( !( $logged['admin'] = member_auth( 1, false ) ) )
    if ( !( $logged['member'] = member_auth( 0, false ) ) )
        $logged['aff'] = member_auth( 2, false );

you can fool with that, or just replace it with:

Code:

$logged['member'] = member_auth(0);

Smoge

Thank you Rob, so much to learn.....