Anyone can add media without an account.

[Sidewinder]

Hi,

Anyone who visits http://www.mydomain.com/video/user.php?do=media can add media to my videos and it says the submission was added by the default username i set in admin cp.

Any help with resolving this issue would be greatly appreciated.

[falarious]

Open Up user.php page

Find
// ##### DO UPLOAD #####
if ($_POST['do'] == 'media')
{
Change To


// ##### DO UPLOAD #####
if ($_POST['do'] == 'media')
{
// ##### REQUIRE USER TO BE LOGGED IN #####
if ($user->check_login() === false)
{
$message = 'You must be logged in to access this page. Please login by following <a href="login.php">this link</a> to login.';
$tpl->output_page('error');
}

Let me know if it works.

[Ryan]

Thanks for the help falarious.

[Lolcrazy]

this doesn't seem to work for me

[Lolcrazy]

forget what I just said....it's working :D