Zen Cart Logo
Forums / General Questions / Admin demo in 1.3.0.x is it safe?

Admin demo in 1.3.0.x is it safe?

Locked

Views: 1,955

Results 1 to 8 of 8
This thread is locked. New replies are disabled.
14 May 2006, 2:18 PM
#1
reesy avatar

reesy

Totally Zenned

Join Date:
Mar 2005
Posts:
535
Plugin Contributions:
3

Admin demo in 1.3.0.x is it safe?

Hi,
I read a post somewhere recently that Ajeh may have forgotten to add something to use this without having to trash the database over and over.
I was wondering is it currently safe to enable this or was I just imagining that post?:blink:

20 May 2006, 3:57 AM
#2
reesy avatar

reesy

Totally Zenned

Join Date:
Mar 2005
Posts:
535
Plugin Contributions:
3

Re: Admin demo in 1.3.0.x is it safe?

Does anyone know if the admin demo is safe please?

20 May 2006, 4:14 AM
#3
Kim avatar

Kim

Obaa-san

Join Date:
Jun 2003
Location:
West Coast, North America
Posts:
26,652
Plugin Contributions:
0

Re: Admin demo in 1.3.0.x is it safe?

I read a post somewhere recently that Ajeh may have forgotten to add something to use this without having to trash the database over and over.
I was wondering is it currently safe to enable this or was I just imagining that post?

Safe to put a Demonstration Admin available to the public?

Please do not PM for support issues: a private solution doesn't benefit the community.

Be careful with unsolicited advice via email or PM - Make sure the person you are talking to is a reliable source.

20 May 2006, 5:12 AM
#4
reesy avatar

reesy

Totally Zenned

Join Date:
Mar 2005
Posts:
535
Plugin Contributions:
3

Re: Admin demo in 1.3.0.x is it safe?

Yes, that is what im asking Kim.
I think the answer is no?

20 May 2006, 7:58 AM
#5
drbyte avatar

drbyte

Sensei

Join Date:
Jan 2004
Posts:
63,513
Plugin Contributions:
176

Re: Admin demo in 1.3.0.x is it safe?

The Admin "Demo" mode is not intended to put your site on display to unauthorized persons.

If you really want to do that, I suggest one of the admin profile or admin level contributions, at least until Zen Cart rewrites the admin system (a couple major releases away).

.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole

Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

20 May 2006, 10:09 AM
#6
reesy avatar

reesy

Totally Zenned

Join Date:
Mar 2005
Posts:
535
Plugin Contributions:
3

Re: Admin demo in 1.3.0.x is it safe?

Thanks for the advice, ill try that :thumbsup:

20 May 2006, 3:04 PM
#7
ajeh avatar

ajeh

Oba-san

Join Date:
Sep 2003
Location:
Ohio
Posts:
62,757
Plugin Contributions:
1

Re: Admin demo in 1.3.0.x is it safe?

Safe? I would not trust it myself as it is more or less a guide to making it safe based on your own needs ...

It has a lot of things covered to prevent the final execution of commands by a level 2 Admin ... but ... they are no all in there nor are the ones in there made to prevent everything destructive ...

It will give you an idea of how to use the demo feature ... but assume that anyone can destroy your site with access to the demo version ... it just helps deter the destruction from happening "as easily" ...

Example ... on the /admin/configuration.php there is a safety utilizing the level 2 block ...

      case 'save':
        // demo active test
        if (zen_admin_demo()) {
          $_GET['action']= '';
          $messageStack->add_session(ERROR_ADMIN_DEMO, 'caution');
          zen_redirect(zen_href_link(FILENAME_CONFIGURATION, 'gID=' . $_GET['gID'] . '&cID=' . $cID));
        }

Purpose of that is to intercept the Save in the configuration settings ... and not let them really happen but allow people to peek around as fully as possible ...

Linda McGrath
If you have to think ... you haven't been zenned ...

**Did YOU buy the Zen Cart Team a cup of coffee and a donut today? Just click here to support the Zen Cart Team!!**

Are you using the latest? Perhaps you've a problem that's fixed in the latest version: [Upgrade today!]
Officially PayPal-Certified! Just click here

Try our Zen Cart Recommended Services - Hosting, Payment and more ...
Signup for our Announcements Forums to stay up to date on important changes and updates!

22 May 2006, 4:39 AM
#8
reesy avatar

reesy

Totally Zenned

Join Date:
Mar 2005
Posts:
535
Plugin Contributions:
3

Re: Admin demo in 1.3.0.x is it safe?

Thanks for the reply Linda.
I was interested because I wanted to give access to people so they could see some Admin contribs I have ported.

I guess screenshots will have to surfice for now.:smile: