Welcome to the E-Blah Community!
We would like to welcome you to our community and invite you to register an account or login.
Being a registered member is important, as it gives you several advantages over the normal Guest status. After registering you will be able to download files and images, post messages, and access member-only portions of the forum - just to name a few. Registration is quick and simple, and only takes about a minute of your time.

E-Blah Community    E-Blah Discussion    E-Blah Bugs  ›  RSS feed allows guests to read restricted forums
Users Browsing Forum
No Members and 1 Guests

RSS feed allows guests to read restricted forums  This thread currently has 592 views. Print
1 Pages 1 Recommend Thread
classixuk
October 8, 2006, 1:05pm Report to Moderator Report to Moderator
E-Blah Member
Posts: 64
Posts Per Day: 0.08
Time Online: 16 hours 57 minutes
Hi guys,

Great job you are doing with the forum software!

One (quite serious) glitch is the new RSS feed button at the top of a forum.

I have one board in my forum restricted to a member group called "salon owners". Although all members can view the topic titles on the message index, I restrict reading messages and making replies to the "salon owners" group.

I have just viewed my restricted salon owners forum as a guest and when I pressed the RSS button I was able to read most of the posts.  

I have password protected that part of the forum for now but this security issue needs to be fixed.

So a quick recap of the problem in generic terms is: If you make a board index on your forum visible to all members, but only allow certain members to read messages, when a guest clicks the title of a topic on that board they will get a message telling them that they are not allowed to read messages on that board. That's OK.
Unfortunately though, if the guest presses the new RSS button there is no security and they will be presented with the contents of the posts they shouldn't have access to.

Hope I've explained myself OK.

Regards,
Chris.

    
Logged Offline
Private Message Private message
Justin
October 8, 2006, 1:11pm Report to Moderator Report to Moderator

The E-Blah Developer
E-Blah Programmer
Posts: 15,075
Gender: Male
Posts Per Day: 6.52
Reputation: 93.40%
Reputation Score: +297 / -21
Time Online: 36 days 23 hours 27 minutes
Location: Tallassee, AL
Age: 22
Ah, I'll add that to my list.  Not too big though.  You can block message index and it'll block them.


I do installs for $25 and upgrades for $20.
Technical support is always free.

  Donate to E-Blah!  

My Websites: Revolution Reality (My Blog)  |  MinistryTalk.com  |  Portfolio

"But you, O Lord, are a compassionate and gracious God, slow to anger, abounding in love and faithfulness." — Psalm 86:15 NIV

Logged Offline
Site Site Private Message Private message Reply: 1 - 4
classixuk
October 8, 2006, 3:08pm Report to Moderator Report to Moderator
E-Blah Member
Posts: 64
Posts Per Day: 0.08
Time Online: 16 hours 57 minutes
What do you mean by that Justin? Do you mean hide the actual forum from view unless you are logged in as a member of the group?

Thanks.
Logged Offline
Private Message Private message Reply: 2 - 4
Justin
October 8, 2006, 7:17pm Report to Moderator Report to Moderator

The E-Blah Developer
E-Blah Programmer
Posts: 15,075
Gender: Male
Posts Per Day: 6.52
Reputation: 93.40%
Reputation Score: +297 / -21
Time Online: 36 days 23 hours 27 minutes
Location: Tallassee, AL
Age: 22
Yes.


I do installs for $25 and upgrades for $20.
Technical support is always free.

  Donate to E-Blah!  

My Websites: Revolution Reality (My Blog)  |  MinistryTalk.com  |  Portfolio

"But you, O Lord, are a compassionate and gracious God, slow to anger, abounding in love and faithfulness." — Psalm 86:15 NIV

Logged Offline
Site Site Private Message Private message Reply: 3 - 4
Justin
October 13, 2006, 11:51am Report to Moderator Report to Moderator

The E-Blah Developer
E-Blah Programmer
Posts: 15,075
Gender: Male
Posts Per Day: 6.52
Reputation: 93.40%
Reputation Score: +297 / -21
Time Online: 36 days 23 hours 27 minutes
Location: Tallassee, AL
Age: 22
Fixed.


I do installs for $25 and upgrades for $20.
Technical support is always free.

  Donate to E-Blah!  

My Websites: Revolution Reality (My Blog)  |  MinistryTalk.com  |  Portfolio

"But you, O Lord, are a compassionate and gracious God, slow to anger, abounding in love and faithfulness." — Psalm 86:15 NIV

Logged Offline
Site Site Private Message Private message Reply: 4 - 4
1 Pages 1 Recommend Thread
Print

E-Blah Community    E-Blah Discussion    E-Blah Bugs  ›  RSS feed allows guests to read restricted forums