[security] prevent discovering hidden tags from URL #278

Closed
opened 2026-10-04 23:50:27 +02:00 by adam · 1 comment
Owner

Reported by plg on 5 Oct 2014 18:57

Even if tags are not shown on tags.php, it is easy to increment the tag id in URL to disover all tags (even if the page shows no photo)

Piwigo Bugtracker #3155

**Reported by plg on 5 Oct 2014 18:57** Even if tags are not shown on tags.php, it is easy to increment the tag id in URL to disover all tags (even if the page shows no photo) [Piwigo Bugtracker #3155](http://piwigo.org/bugs/view.php?id=3155) <!-- github-sync-id:97226895 -->
adam closed this issue 2026-10-04 23:50:27 +02:00
Author
Owner

commit 29f938acba by @Teatek

commit 29f938acba2b11d3b4a29abbe52c032495a005b9 by @Teatek <!-- github-comment-id:454824424 -->
Sign in to join this conversation.
No labels
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: adam/Piwigo#278