Add entry without beeing logged in

[stadskle]

Is it possible to configure Serendipity so that this is possible?

Thanks in advance.

[garvinhicking]

That would be a HUGE security problem if anyone could add entries to your blog and access your backend without credentials. I would really only suggest to do this in an intranet blog.

There would be ways to create a plugin for you that logs you into s9y automatically without any user response. Or you could just edit your serendipity_config_local.inc.php file and insert this at the end:

Code: Select all

$serendipity['serendipityUser'] = 'Anon';
$_SESSION['serendipityPassword'] = '';
$_SESSION['serendipityAuthedUser'] = true;
$_SESSION['serendipityAuthorid'] = $serendipity['authorid'] = 1;
$_SESSION['serendipityUserlevel'] = $serendipity['serendipityUserlevel'] = 255;

You have been warned, though.

Regards,
Garvin

[stadskle]

Thank you!

I'm not planning on doing it. But it was necessary to know when developing our plugin.

[garvinhicking]

Hi!

Yes, a plugin can basically override any authentication because it can call any serendipity function without checking the authentication.

Best regards,
Garvin