Bug In Private Forums

[bigsoccer tech]

When a forum is made private, users cannot access teh FORUM, but if they know the THREAD ID, they can read the post.

The forum threads need to be noted as private and authenticated..this is a amjor issue for sites that use private forums for management.

[John]

This has been noted previously. The fix is to add this code at about line 70 of showthread.php:

[code]
if ($threadinfo[visible]==0) {
$idname="thread";
eval("echo standarderror(\$bbtitle,\"".gettemplate("error_invalidid")."\");");
}

$getperms=getpermissions($bbuserid,$bbusergroupid,$forumid);
if ($getperms[canview]==0) {
eval("echo standarderror(\$bbtitle,\"".gettemplate("error_nopermission")."\");");
exit;
}

[/code]

[werehere]

Yes we noted this one before, and the code fix seems to work perfectly:)

[bigsoccer tech]

thanks that fixed it