On image node pages ("http://www.example.com/img_1.jpg") even anonymous users can get the originals by appending ?size=_original to the image name ("http://www.example.com/img_1.jpg?size=_original").

(This is a different problem from http://drupal.org/node/86283).

Thanks!

CommentFileSizeAuthor
#2 image_156442.patch1.26 KBdrewish

Comments

drewish’s picture

ah, i'd posted a patch to http://drupal.org/node/86283#comment-268474 to fix this... i suppose we could move that over here though...

drewish’s picture

Status: Active » Needs review
StatusFileSize
new1.26 KB

got a new patch. works better when an invalid size is specified it redirects to the default.

drewish’s picture

Status: Needs review » Fixed

i've committed this to HEAD and DRUPAL-5

Hetta’s picture

Wonderful, it's fixed in the latest dev, thanks!

Anonymous’s picture

Status: Fixed » Closed (fixed)