Welcome, Guest.
Please login or register.

Welcome to the E-Blah Community!
We would like to welcome you to our community and invite you to register an account or login.
Being a registered member is important, as it gives you several advantages over the normal Guest status. After registering you will be able to download files and images, post messages, and access member-only portions of the forum - just to name a few. Registration is quick and simple, and only takes about a minute of your time.

E-Blah Community  ›  E-Blah Discussion  ›  E-Blah Bugs  ›  Find latest posts by this member
Users Browsing Forum
No Members and 1 Guests

Find latest posts by this member  This thread currently has 287 views. Print
1 Pages 1 Recommend Thread
kslager
July 25, 2006, 9:00pm Report to Moderator Report to Moderator

E-Blah Member
Posts: 126
Gender: Male
Posts Per Day: 0.04
Time Online: 18 hours 42 minutes
This isnt a bug, but possibly more of a security issue.  

Lets say you have a board on your forum that is set to allow only certain members to view threads in that board.


If a regular user (one who is not allowed to view threads in this protected board) goes to the member center of a user that has posted in that protected board and click the "Find latest posts by this member" you will be able to read their thread in the protected board.

Kind of defeating the purpose of having certain board permissions.

If that didn't make sense, I will attempt to clarify.


Visit http://www.heartbeatforum.net for information on heart dsease and other health related discussion and for anxiety and stress issues, please visit http://www.anxietyforums.net
Logged Offline
Site Site Private Message Private message
Justin
July 26, 2006, 7:03am Report to Moderator Report to Moderator

The E-Blah Developer
E-Blah Programmer
Posts: 15,196
Gender: Male
Posts Per Day: 4.38
Reputation: 93.25%
Reputation Score: +304 / -22
Time Online: 37 days 19 hours 48 minutes
Location: Tallassee, AL
Age: 25
No, search is secure.  You can go in as a regular user and see that it doesn't show you the results (even if an Administrator goes and finds their posts and a regular user goes and looks at the history, it won't work).  If it does work, make sure you're using P9.71B. If it still works, upgrade, because I remember adding this ... lol.


I do installs for $25 and upgrades for $20.
Technical support is always free.

  Donate to E-Blah!  

My Websites: Revolution Reality (My Blog)  | Portfolio

"But you, O Lord, are a compassionate and gracious God, slow to anger, abounding in love and faithfulness." — Psalm 86:15 NIV
Logged Offline
Site Site Private Message Private message Reply: 1 - 5
Adite
August 25, 2006, 9:41am Report to Moderator Report to Moderator
The innocent can never last.
Posts: 1
Gender: Female
Posts Per Day: 0.00
Time Online: 1 hours 35 minutes
Location: UK
Age: 23
Core Version: Platinum 9.71B
Internal Version: 16
Supported Themes: Platinum 9

I have the same bug. Someone pointed it out to today, and Ive checked it by creating a new account. You can see them.  

Is this issue dealt with in the new version?
Logged Offline
Site Site Private Message Private message Reply: 2 - 5
Justin
August 25, 2006, 3:53pm Report to Moderator Report to Moderator

The E-Blah Developer
E-Blah Programmer
Posts: 15,196
Gender: Male
Posts Per Day: 4.38
Reputation: 93.25%
Reputation Score: +304 / -22
Time Online: 37 days 19 hours 48 minutes
Location: Tallassee, AL
Age: 25
I had to make sure, and here's my results ...

Oh ... the first shows 11 pages, but that same search ID used by a guest showed only 9 pages.  Hence about 2 pages were removed.



This post contains attachments; to download them you must login.



I do installs for $25 and upgrades for $20.
Technical support is always free.

  Donate to E-Blah!  

My Websites: Revolution Reality (My Blog)  | Portfolio

"But you, O Lord, are a compassionate and gracious God, slow to anger, abounding in love and faithfulness." — Psalm 86:15 NIV
Logged Offline
Site Site Private Message Private message Reply: 3 - 5
kslager
August 25, 2006, 4:34pm Report to Moderator Report to Moderator

E-Blah Member
Posts: 126
Gender: Male
Posts Per Day: 0.04
Time Online: 18 hours 42 minutes
i eventually just removed the "Find latest posts by this member" line from MemberPanel.lng

quick fix  


Visit http://www.heartbeatforum.net for information on heart dsease and other health related discussion and for anxiety and stress issues, please visit http://www.anxietyforums.net
Logged Offline
Site Site Private Message Private message Reply: 4 - 5
Justin
August 25, 2006, 7:28pm Report to Moderator Report to Moderator

The E-Blah Developer
E-Blah Programmer
Posts: 15,196
Gender: Male
Posts Per Day: 4.38
Reputation: 93.25%
Reputation Score: +304 / -22
Time Online: 37 days 19 hours 48 minutes
Location: Tallassee, AL
Age: 25
Quoted from kslager
i eventually just removed the "Find latest posts by this member" line from MemberPanel.lng

quick fix  


Not sure why you did this, lol, but ok.

I was simply proving a point: it checks to see if the user is allowed access to that message.


I do installs for $25 and upgrades for $20.
Technical support is always free.

  Donate to E-Blah!  

My Websites: Revolution Reality (My Blog)  | Portfolio

"But you, O Lord, are a compassionate and gracious God, slow to anger, abounding in love and faithfulness." — Psalm 86:15 NIV
Logged Offline
Site Site Private Message Private message Reply: 5 - 5
1 Pages 1 Recommend Thread
Print

E-Blah Community  ›  E-Blah Discussion  ›  E-Blah Bugs  ›  Find latest posts by this member

© 2001-2008 E-Blah
About Us - Contact