[Serusers] Limiting REGISTER requests (newbie)

Jan Louw jdlouw at michelangelotech.com
Fri Mar 4 13:03:16 CET 2005


Hi,

I'm trying to setup SER to only allow UAs to register their "location"
MySQL entry as specified in the "subscriber" table. Currently an
authorized user can set an arbritrary value in the "location" table.
Whats to prevent 1 authorized user from stealing anothers location
entry? For instance:

user1 - REGISTER sip:user1.blah.internal
user2 - REGISTER sip:user1.blah.internal

Now user2 has hijacked user1's location.

Thanks
JD





More information about the sr-users mailing list