4 Mar
2005
4 Mar
'05
12:03 p.m.
Hi,
I'm trying to setup SER to only allow UAs to register their "location" MySQL entry as specified in the "subscriber" table. Currently an authorized user can set an arbritrary value in the "location" table. Whats to prevent 1 authorized user from stealing anothers location entry? For instance:
user1 - REGISTER sip:user1.blah.internal user2 - REGISTER sip:user1.blah.internal
Now user2 has hijacked user1's location.
Thanks JD