forum security

[tony adams]

have has some issues with some members recently and have made my board members only, nothing is on view to guests or passers by but the front end, no forums or any suggestion what might be there

had a situation this morning where 6 guests showed, they were all variations on one ip address registered to Trend Micro, some were viewing the front end of the board but others seemed to be viewing specific threads, something i thought they could not

when checking further i found that if i went to a link that was to a thread or forum page i could see it as a guest, again something i did not want

looking at security settings, all permissions are set to 'no' for those not logged in - so how could i view a forum page as a guest??

thanks

tony

[Marco van Herwaarden]

If you are using default vBulletin, and have set the permissions of the Unregistered / Guests usergroup to not be able to view the forum, then this can only happen if you have the page cached in your browser.

Also the guests you saw 'browsing' a thread where probably following the link from a previously indexed page and should be getting the no permission error.

[tony adams]

thanks Marco, that explains some of it, am still a little confused, we have changed the address of the forum from

http://server name/directory

to

http://server name/new directory

at the time i changed the name i locked all guests out, so cannot understand following an old link

this is a screen grab of the 6 guests, some are getting no permission messages, but others seem to have got to threads they should not be able to see

[Marco van Herwaarden]

It looks like you have only set the Forum Permissions for the guests.

Check if you have set 'Can View Forum' to No for the 'Unregistered / Not Logged In' usergroup.

From your screenprint Guests are getting a no permission when trying to view a thread, but are still allowed to view the board index.

You can PM me the URL to one of the threads and i will check what i can see as guest.

[tony adams]

hi - as far as i can see i have all forum permissions set to no for those i do not want to view, but i may well have missed something

have pm'ed you some url's

thanks

tony

[Marco van Herwaarden]

I checked the url's you send me, and it seems to me that you haven't set the 'Unregistered / Not Logged In' usergroup setting 'Can View Forum' to No

[tony adams]

thanks Marco, i had missed the usergroup setting - although i am happy that the front end can be seen at the moment

but knowing about that setting is useful for the future

the other 2 [threads and posts] is how i want it, not sure why i saw what i saw on the screen grab, but they seem locked when you looked which is what i need

thanks again

[Marco van Herwaarden]

If you look at your screenprint, you also see that all guests that are trying to view a thread have a No Permission error. (you can see this because of the stop sign, hoover your mouse over the stop-sign to view the error the guest is getting).