Firstly I am currently running 2.3.5 with a clean search.php.
It recently came to our attention that users can use the search function to view posts in hidden forums. It's strange the way it works, if a user clicks a link in the post or profile of a user then they can't see the posts. However if they go to search.php, type in the username of a person who has access to said hidden forums, and set the search to search (I'm using "search" a lot here, ain't I?) the category that the hidden forum is in, then they can see the first 200 characters of the posts. This, obviously, isn't very healthy at all.
Is it a bug that can be fixed?
It recently came to our attention that users can use the search function to view posts in hidden forums. It's strange the way it works, if a user clicks a link in the post or profile of a user then they can't see the posts. However if they go to search.php, type in the username of a person who has access to said hidden forums, and set the search to search (I'm using "search" a lot here, ain't I?) the category that the hidden forum is in, then they can see the first 200 characters of the posts. This, obviously, isn't very healthy at all.
Is it a bug that can be fixed?
Comment