network-weathermap
network-weathermap copied to clipboard
Create copy - Incorrect permissions
Summary
A config file without the correct permissions is parsed by weathermap PHP editor.
Weathermap 0.98a
How to reproduce?
A user without permissions to write files for the www-data group creates a file inside the folder: \weathermap\configs
Although the file is not listed as an option to be opened it is listed in the dropdown menu that creates a copy of an existing config.
Therefore clicking into create copy
weathermap creates a new config from a file without the correct permissions.
What is incorrect? The file is readable (all that is needed to make a copy) and the www-data user can write to ./configs
to make the new file. read-only files can be copied. It doesn't appear in the editor, because you can't edit it.