irc
Mon 28th May '01, 8:15pm
I have a simple security measure that I would like included in a future version:
Allow us to set a flag for private sub-forums that requires users to re-login in order to display it. This could be similar to how you require an admin to login when they access the control panel.
Here is the reason: A vast number of my users know each other in real life. Many users share a computer with someone else who is also a member of my forum. Many of us perform at the same theater and the computer there is used by many users. What happens sometimes is that a user who has access to a private forum will login at the theater. They use cookies and are unaware that they should logout at the end of their session. The next day a new user uses that same computer to access my message board and they see the private forum. Voila, it's not so private anymore.
Another solution would be to ask a user if they want to create a cookie the first time they access the message board from a particular location. Most web based e-mail services have something like this. Instead of having an option where they say, "always use cookies." They have an option which says "Remember my ID on this computer."
I'm happy to see that passwords are being looked at for the next version of vbulletin, but I would like to have one of these other options as well. I think they might be easier to implement, but that's just a guess. :)
Allow us to set a flag for private sub-forums that requires users to re-login in order to display it. This could be similar to how you require an admin to login when they access the control panel.
Here is the reason: A vast number of my users know each other in real life. Many users share a computer with someone else who is also a member of my forum. Many of us perform at the same theater and the computer there is used by many users. What happens sometimes is that a user who has access to a private forum will login at the theater. They use cookies and are unaware that they should logout at the end of their session. The next day a new user uses that same computer to access my message board and they see the private forum. Voila, it's not so private anymore.
Another solution would be to ask a user if they want to create a cookie the first time they access the message board from a particular location. Most web based e-mail services have something like this. Instead of having an option where they say, "always use cookies." They have an option which says "Remember my ID on this computer."
I'm happy to see that passwords are being looked at for the next version of vbulletin, but I would like to have one of these other options as well. I think they might be easier to implement, but that's just a guess. :)