FUDforum
Fast Uncompromising Discussions. FUDforum will get your users talking.

Home » FUDforum Development » Bug Reports » Forum Security Problem! If "Forum Info" enabled
Show: Today's Messages :: Polls :: Message Navigator
Return to the default flat view Create a new topic Submit Reply
icon4.gif  Forum Security Problem! If "Forum Info" enabled [message #8919] Sat, 01 March 2003 20:49 Go to previous message
kaepten is currently offline  kaepten   Switzerland
Messages: 9
Registered: February 2003
Karma:
Junior Member
If "Forum Info" is enabled every new message ist shown in the info Box.

The permissions of the "Group Manager" are inoperative.

A new message in a forum which permissions are hidden=false and read=false for unregistered users is shown in the Info Box an browsable for any user!

cheers
kaepten

There are additional problems of this type. In the profile of a user is the last posted message visible and browsable! For me is this a big problem, because i have a lot of different forums with different users/permissions. But with whis security hole, all group permissions are useless!


** my sig **

[Updated on: Sat, 01 March 2003 21:12]

Report message to a moderator

[Message index]
 
Read Message icon4.gif
Read Message
Read Message
Read Message
Read Message
Read Message
Previous Topic: No validation in admuser.php
Next Topic: your search engine
Goto Forum:
  

-=] Back to Top [=-
[ Syndicate this forum (XML) ] [ RSS ]

Current Time: Thu Nov 28 12:28:59 GMT 2024

Total time taken to generate the page: 0.04663 seconds