I have just discovered a feature which allows you to create a new blog post from a mobile by navigating to the route blog and adding /a-new on the end of the url.
There seems to be no authentication using the method..
Thankfully it doesnt seem to work (at least with my blog) as it goes to the submitting page but nothing is created, Is ther any way to disable this? It seems like a massive security hole if anyone can create a blog post.
creating post with the /a-new URL
I have just discovered a feature which allows you to create a new blog post from a mobile by navigating to the route blog and adding /a-new on the end of the url.
https://github.com/Shazwazza/Articulate/wiki/Creating-a-blog-post
There seems to be no authentication using the method..
Thankfully it doesnt seem to work (at least with my blog) as it goes to the submitting page but nothing is created, Is ther any way to disable this? It seems like a massive security hole if anyone can create a blog post.
It authenticates at the end of the whole process. There is no security issue.
is working on a reply...