rich@xxxxxxxxxxxxxxx wrote:
I found one small problem with ringlink that I think needs to be
fixed. I installed it then went to the screen to add a ring, which
I have set to not allow others to create rings. It says they
cannot, then exposes the ringmasters email address to the internet.
I fully agree that exposing addresses that way is bad. Thanks for
calling our attention to it, Richard!
There is a similar exposure when somebody requests newsite.pl for a
ring whose ringmaster doesn't accept new applications.
I have made a couple of changes, taking into consideration that
Ringlink presupposes that there is a homepage for both the system and
for each webring. What I did was replacing the email address to the
system administrator at newring.pl with a link to the system homepage,
and I replaced the email address to the ringmaster at newsite.pl with
a link to the ring homepage.
Please feel free to download the changed newring.pl and newsite.pl
from the CVS repository, and let us know if you think the changes are
good enough.
/ Gunnar