|
|
|
|
Customers
Important Contributors
GenoPro version: 3.0.0.7
Last Login: Sunday, November 26, 2023
Posts: 213,
Visits: 4,464
|
I think I've found a major security bug.When I exclude an individual or a family from a report (Make label), all the photos which are related to this page are still uploaded to the server and google can find it. Can you confirm this bug?
|
|
|
|
|
Customers
Important Contributors
GenoPro version: 3.0.0.7
Last Login: Sunday, November 26, 2023
Posts: 213,
Visits: 4,464
|
Any comment please?
|
|
|
|
|
Administrators
Moderators
Customers
Gamma
FamilyTrees.GenoPro.com
Translator
GenoPro version: 3.1.0.1
Last Login: Tuesday, October 28, 2025
Posts: 4,886,
Visits: 22,799
|
|
|
|
|
|
Customers
Important Contributors
GenoPro version: 3.0.0.7
Last Login: Sunday, November 26, 2023
Posts: 213,
Visits: 4,464
|
Well - I'm not sure if this is the problem on my case. Let me please explain: I've posted a report with many individuals to genopro server. most individuals has a unique photos related only to the individual page. then I wanted to exclude from the report some individuals, but I wanted to keep them and to keep the photos on my "ofline" genopro database. So I've excluded those individuals from the report (mark label) and then deleted with FTP their existing "individual page" and the related photos from genopro server Next time that I ran the report, the individual pages was not there (exactly as I wanted) but their photos were copied again to Genopro server and also to : "pictures.htm" Those photos were linked ONLY to the individual pages that were "excluded" and Not to any other "individual" or "family" or "source" pages. There was a "source" to those photos, but those photos were not linked as the "picture of the source" Anyway, I think that this is a major security bug, because when you exclude an individual from a report and delete its photos from the server, you expect not to see those photos again on the web.
Edited: Friday, November 28, 2008 by
beraha
|
|
|
|
|
Administrators
Customers
Important Contributors
FamilyTrees.GenoPro.com
GenoPro version: 3.1.0.1
Last Login: 2 days ago @ 9:23 PM
Posts: 3,464,
Visits: 26,854
|
I agree with Beraha on this. There is a problem here. A quick test shows that photos for an excluded individual get copied to the report area and are in fact included in the photo gallery page. I can and should remove them from the photo gallery (by checking each reference to the picture for the exclude/make label tag). However I am not able to prevent it being copied to the report destination at the end of the report as this is outside the scope of the skin.
As I understand it the GenoPro Report Generator copies across all photos in the cloned genopro document (i.e. taking into account the genomap subset and any privacy settings) unless the options tab setting indicates that it is referenced from the source folder.
AFAIK there is no method within the SDK or Picture property that can set via the skin to exclude a picture from being copied to the report folder.
'lego audio video erro ergo disco' or "I read, I listen, I watch, I make mistakes, therefore I learn"
|
|
|
|
|
Customers
Important Contributors
GenoPro version: 3.0.0.7
Last Login: Sunday, November 26, 2023
Posts: 213,
Visits: 4,464
|
Ron (11/28/2008)
. I can and should remove them from the photo gallery (by checking each reference to the picture for the exclude/make label tag) .Hi Ron Well...That's a start. I think that you have to check also the "picture-picXXXX.htm" files and not just the "pictures.htm" file. About the other problem that those photos are still copied to the server at the end of the report - I hope that Dan can solve that, as it's really an urgent security bug. If you decided to exclude a person from a report which is published on the web, you don't want that its photos will still published on google.
|
|
|
|
|
Customers
Important Contributors
GenoPro version: 3.0.0.7
Last Login: Sunday, November 26, 2023
Posts: 213,
Visits: 4,464
|
Ron (11/28/2008)
I agree with Beraha on this. There is a problem here. A quick test shows that photos for an excluded individual get copied to the report area .Is there any progress of fixing this annoying bug? I think that this fix is for Dan since it's related to genopro itself. Thank you.
|