[cobalt-users] Real bad bug! RAQ3

[Karl-Heinz <webmaster@xxxxxxxxxxxxxxxxx>]

Hi,

i install today on a new account the script Links 2.0, which is a type
of a "mini yahoo".

I have on the same server another installation of Links 2.0, but on
another account with a different domain.

I made the mistake an install the version from the first accoun on the
second account and forget to change one of the paths.

I setup new categories and things like this.

Than i realize, that my second installation manipulates the datebase
of the first installation.

ok, i have left  a path to the first instaletion as i wrote above, but
is is very strange, that i can write from one domain to the database
in the cgi-bin of another domain with different user and group.

i real life this means, everyone who knows the paths can grab, modify
and what ever he want on another domain.

On my server is nothing special. All changes are the cobalt updates,
nothing else. All accounts are made with the gui.

Karl