Advertise Here
« previous next »
Pages: [1]

Author Topic: SECURITY ISSUE  (Read 978 times)

0 Members and 1 Guest are viewing this topic.

Offline MsRowdyRedhead

  • SMF For Free Member
  • *
  • Posts: 96
    • View Profile

    • Total Badges: 17
    Badges: (View All)
    Level 4 Fifth year Anniversary Fourth year Anniversary Third year Anniversary Second year Anniversary
SECURITY ISSUE
« on: March 06, 2012, 03:14:11 pm »
After moving our entire debate board into the staff area yesterday for inspection & cleanup, we discovered that normal members were not only able to SEE it, they could also still POST in it.
The members in question have been temp  banned from posting.

I believe this may have been possible due to "see members last posts"

Is there a way around that??

Alternately, is there a way to turn off "see last posts?? I looked for some time last night, but could not find it.

Thank you in advance for your help.


Logged

Offline Andrew

  • Helpers
  • *
  • Posts: 2060
  • Andrew at your service
    • View Profile
    • Alabama Weather Prediction

    • Total Badges: 32
    Badges: (View All)
    10 Poll Votes Level 6 Eighth year Anniversary Seventh year Anniversary Sixth year Anniversary
Re: SECURITY ISSUE
« Reply #1 on: March 06, 2012, 04:24:10 pm »
This can all be fixed by checking the permissions for membergroups in Admin -> Permissions.

I don't believe there is a way to disable the "see last posts" option.
Logged

Offline MsRowdyRedhead

  • SMF For Free Member
  • *
  • Posts: 96
    • View Profile

    • Total Badges: 17
    Badges: (View All)
    Level 4 Fifth year Anniversary Fourth year Anniversary Third year Anniversary Second year Anniversary
Re: SECURITY ISSUE
« Reply #2 on: March 06, 2012, 07:54:00 pm »
They were able to get around the issue because the board had been moved into the staff area and not originated there.
All permissions were set correctly, and double checked.
They circumvented the permissions via last post.
So I guess it's just a security hole we will have to be aware of.
Thanks.
Logged
Pages: [1]
« previous next »
 

Related Topics

  Subject / Started by Replies Last post
3 Replies
1073 Views 		Last post January 30, 2007, 01:21:13 am
by Laugh-nd-kid
1 Replies
793 Views 		Last post February 16, 2008, 10:32:38 am
by simply sibyl
6 Replies
1831 Views 		Last post April 05, 2008, 08:47:56 pm
by DreaminOfAngels
0 Replies
3275 Views 		Last post May 24, 2008, 09:36:56 am
by SMF For Free
8 Replies
1960 Views 		Last post February 19, 2011, 03:46:13 pm
by Andy