4 Mar
2005
4 Mar
'05
1:03 p.m.
Hi,
I'm trying to setup SER to only allow UAs to register their "location"
MySQL entry as specified in the "subscriber" table. Currently an
authorized user can set an arbritrary value in the "location" table.
Whats to prevent 1 authorized user from stealing anothers location
entry? For instance:
user1 - REGISTER sip:user1.blah.internal
user2 - REGISTER sip:user1.blah.internal
Now user2 has hijacked user1's location.
Thanks
JD