No announcement yet.

Possible Security Problem?

  • Filter
  • Time
  • Show
Clear All
new posts

  • Possible Security Problem?
    MySQL: v3.23.45
    PHP: v4.1.1
    Server OS: Linux
    vB Version: 2.2.5

    Today, I banned a user at my forums. He of course logged out and began viewing the board as a guest. To my horror, he started viewing threads in a locked forum. I went through and checked all my options, and I had the board set that guests shouldn't be able to view the board at ALL, let alone view locked forums. I double checked forum permissions, etc. Image Attached. I am worried that this might be a large security hole.

  • #2
    He was attempting to view them but got the 'you are not logged in or don't have permissions' screen instead. He was probably going through threadids to see if he could find something.
    Steve Machol, former vBulletin Customer Support Manager (and NOT retired!)
    Change CKEditor Colors to Match Style (for 4.1.4 and above)

    Steve Machol Photography

    Mankind is the only creature smart enough to know its own history, and dumb enough to ignore it.


    • #3
      Another SW RP board.....How interesting and the forum name in the pic reminds me of someone from ours. Hope you like vB!
      SWFans.Net Forums
      Not Your Average Star Wars Forums.

      Just a few of the other styles to choose from:
      Jedi | Streamlined | T-Phantom


      widgetinstance 262 (Related Topics) skipped due to lack of content & hide_module_if_empty option.