Printable View
Hi
"Members <250 posts" know that there
is a forum called AntiOnline Addicts, however the
posts are not accessible. Fine with me,
of course.
However, I am a bit puzzled that I get
information about thread-titles like
"Windows 2000 Server Password Cracking" using either the search engine, the "last 20 posts by username" and/or "all posts by username".
I just wanted to report that issue -
it looks like some inconsistency in the
security measures to me.
Maybe it's just a feature :D
Cheers.
There are many way's that non-addict's can view information and threads in the Addict's forum. It isn't really a bug per-se, but more a method/way to do so without being granted actual access.
Seeing the actual thread is hard but the rest, pretty easy :)
SDK: Actually, seeing the whole thread is easy.. it's seeing the whole forum which is tricky. Even that though can be done.
Really? Does mnstrgrl know what and plan to fix it?
I've plugged a lot of holes for access to the addicts forum, but it seems like new ones pop up all the time. Thread titles I'm not so concerned about, but I'd like to keep members w/o access from reading whole threads. If you guys want to be helpful, you can PM me the methods you've uncovered, and I can look into plugging them.
thanks
- h