DNS Manager - Security Issue

[insertcoin]

Hi,

Been installing the DNS manager, but its being a little odd.

The biggest issue I have at the moment, is that it doesn't seem to know who owns a domain.

Example:
domainA.com - Account User1
Bdomain.com - Account User2

If I login to User1 who owns domainA.com, go to DNS Manage "clientarea.php?managedns=domainA.com" I am able to edit the dns for domainA.com, however if I change the URL to "clientarea.php?managedns=Bdomain.com" it shows me the DNS for that domain, and I am able to edit it even though I am still logged in as "User1".

I assume I have done something wrong, but this seems very insecure!

[insertcoin]

Bump.

Can someone give me an answer to this issue?

[Joanna]

Hello,

Thank you for reporting the issue.

You did nothing wrong. There was a problem with the module itself but it is already resolved. You can now download a fixed version of DNS Manager For WHMCS from your client area.

If there is anything else we can help with, please let us know.

And once again, thank you for your perceptiveness!

[insertcoin]

Hi,

Thanks for the reply, I will give it a go. Has anything changed with the installation procedure?

[insertcoin]

This appears to be resolved. I have another issue with the installation but will open another post.

[ghanley]

I get this message - The domain owner is another user

Is this related??

How to fix?

[Joanna]

Please note that we have already answered your question here.

[insertcoin]

Hi,

Unfortunately we have moved on to a competitors product. Finding such a massive and obvious security hole did not instil any confidence in the product for obvious reasons.

Thank you for replying and fixing the fault.

[Joanna]

In this case, we can only express our hope that your trust in our company is not completely lost and we will get a chance to prove the efficiency of our products again. The issue discussed in this thread has been entirely fixed and we ensure that it will not happen again. Keep in mind that you are very welcome to come by any time you need.

[ghanley]

Insertcoin,

Which product did you move to - I to am experiencing huge frustrations.

I have not been able to edit zone records at all.

Seems I have to wait 3 days for replies.