[CMS] Can I delete list.php?

[maipoman]

On every profile page, there is a link that to "View articles" made by that member. It goes to "list.php" Problem is, that it displays previews of articles to everyone - even users who are not logged in or usergroups who DON'T have permission to view those articles. Big problem.

So, can I delete list.php or will that impact the system in other ways?

[Lynne]

You would then get a Page Not Found error. Wouldn't it be better to just edit the templates and remove the links to the page? And, it is also the same page used to list all articles in a category, so you wouldn't be able to show articles in a category if you removed that page either.

[maipoman]

I have removed the link from the profile-template. But it still pops up in Google-searches.

Why are usergroups who don't have permission to view the articles, able to view them from that page? It kind of defeats the purpose of setting permissions.

[Lynne]

I do not know why they are showing up if the users don't have permission to view them. If you have found a bug, then you should post it in the bug tracker so it gets fixed. You could modify the code or write a plugin to probably disable the list.php page if they are trying to view all articles by a specific author.

[maipoman]

I don't know if it's a bug, but it certainly is a problem. I should add that on the article itself, I have set "Allow preview" to NO. So I really don't think previews should be viewable by usergroups with no permission.

[Wayne Luke]

Showing previews to people who don't have permission is a bug and I believe it will be fixed in 4.1.8 or 4.1.10.

[Trevor Hannant]

For info - http://tracker.vbulletin.com/browse/VBIV-13283

Scheduled to be fixed in 4.1.8

[maipoman]

For info - http://tracker.vbulletin.com/browse/VBIV-13283

Scheduled to be fixed in 4.1.8

It's not fixed in 4.1.8

[Lynne]

It's not fixed in 4.1.8

If you are using all default files, a default style, and no plugins, then you should petition to have the issue reopened since it is marked as fixed in 4.1.8 right now.