[Pmwiki-users] security problem -> edit password

[lists@basel-inside.ch]

> Just the moment i found a mysterious thing.

> Some of my pages i have secured with a password on read-level. This works so
> far fine but if i add the param =edit directly to the uri then i can read
> the contents of the secured page without being asked for a password.
>
> Is this a known problem?
>
> What can i do to workaround this?

A read password doesn't imply a edit protection,
you have to set an edit password as well.

pog