Hi all
I can't quite believe this one.
As you know I have upgraded a test 4.2.5 forum to the latest vb5.3.1 and have been working through the various issues with the help of vb staff here.
I was pretty happy until tonight when I realised that all sections of my forum can be read by anyone who is not even logged in.
Pretty much every section of the forum should be hidden and is viewable to subscribers only.
I have a visitor section and one other section that should be able to be viewed by visitors/not logged in.
This is a total disaster, my forum contains highly sensitive information (electronics) nothing dodgy!
How could this happen????
Do I now have to check every level of subscription to make sure these subscribers can only see what they are supposed to.
That will take hours of work.
Looking at the unregistered/not logged in permissions I see mostly all No's in the tick boxes however under a heading called;
Create Permissions
Can create text/post YES
Can create report YES
Can create poll YES
Can create attachment YES
Can create video YES
Can create link YES
Can create event YES
Forum Viewing Permissions
Can View Channels YES
Can Download Image Attachments YES
I have 10 levels of member, each with similar but different permissions.
If this issue is throughout all the user groups it will be the end of any upgrade to the live forum and we will be forced to stick to vb4.2.5
I can't believe that my forums entire content would have been available to anyone and I could easily have missed that but was looking to see if the registration form appeared correctly.
I can't quite believe this one.
As you know I have upgraded a test 4.2.5 forum to the latest vb5.3.1 and have been working through the various issues with the help of vb staff here.
I was pretty happy until tonight when I realised that all sections of my forum can be read by anyone who is not even logged in.
Pretty much every section of the forum should be hidden and is viewable to subscribers only.
I have a visitor section and one other section that should be able to be viewed by visitors/not logged in.
This is a total disaster, my forum contains highly sensitive information (electronics) nothing dodgy!
How could this happen????
Do I now have to check every level of subscription to make sure these subscribers can only see what they are supposed to.
That will take hours of work.
Looking at the unregistered/not logged in permissions I see mostly all No's in the tick boxes however under a heading called;
Create Permissions
Can create text/post YES
Can create report YES
Can create poll YES
Can create attachment YES
Can create video YES
Can create link YES
Can create event YES
Forum Viewing Permissions
Can View Channels YES
Can Download Image Attachments YES
I have 10 levels of member, each with similar but different permissions.
If this issue is throughout all the user groups it will be the end of any upgrade to the live forum and we will be forced to stick to vb4.2.5
I can't believe that my forums entire content would have been available to anyone and I could easily have missed that but was looking to see if the registration form appeared correctly.
Comment