gugu Wrote:I´m not sure are you point it is a security bug in getsimple
or it is a security bug in I18N Gallery ?
Well thats the question isn't it, my server says the gallery, or is it just the nature of flat file xml?
Either way a hole that lets someone upload to your server space is serious. Not everyone has ssl, and most people wouldn't know what to do if this happened.
It's certainly a problem though.
djr.heliohost.org/me