lock.php performs no authentication #30
Description
lock.php does not authenticate lock requests, allowing anyone to lock any tripos for arbitrary periods of time. On the other hand locks can be ignored.
{{ message }}
lock.php does not authenticate lock requests, allowing anyone to lock any tripos for arbitrary periods of time. On the other hand locks can be ignored.