Feeling Lucky
?
[#12439] - TinyMCE templates are accessable without login
- Closed
- 16 Oct 2016
- Medium
- Build: staging
- # 12439
Steps to reproduce the issue
https://www.joomla.org/media/editors/tinymce/templates/layout1.html
Expected result
If we are not logged in this should not be possible?
Actual result
You see the html output
| Labels |
Added:
?
|
||
| Status | New | ⇒ | Closed |
| Closed_Date | 0000-00-00 00:00:00 | ⇒ | 2016-10-16 17:07:55 |
| Closed_By | ⇒ | zero-24 |
zero-24
- comment
- 16 Oct 2016
Ahhhhhhh ... I can re-using your meme now :P
You're directly accessing a HTML file in the filesystem. The .htaccess file doesn't rewrite requests to trigger Joomla for files that exist in the filesystem.