I have just released version 2.3.2 of the Forum Plugin on my site. This is a Release Candidate and want to get some testing results and feedback before making a general release available. You can view the details of the release on my site here. It includes a number of fixes and a few new features.
A security issue was reported on Sept 13th by member magomarcelo in this post
here
In version 2.3.1: I introduced a new Admin Navbar and inadvertently removed the include of the code to check if the user had admin forum access. There are other logic checks for perms but this was clearly a big issue. I posted a fix within 15 minutes of seeing this report.
If you are running version 2.3.1: Add the following code to your gf_functions.php located in the admin/plugins/forum folder - just after the line that does the include of lib-common.php.
if (!SEC_hasRights('forum.edit')) {
echo COM_siteHeader();
echo COM_startBlock($LANG_GF00['access_denied']);
echo $LANG_GF00['admin_only'];
echo COM_endBlock();
echo adminfooter();
echo COM_siteFooter(true);
exit();
}
Geeklog components by PortalParts -- www.portalparts.com
A security issue was reported on Sept 13th by member magomarcelo in this post
here
In version 2.3.1: I introduced a new Admin Navbar and inadvertently removed the include of the code to check if the user had admin forum access. There are other logic checks for perms but this was clearly a big issue. I posted a fix within 15 minutes of seeing this report.
If you are running version 2.3.1: Add the following code to your gf_functions.php located in the admin/plugins/forum folder - just after the line that does the include of lib-common.php.
Text Formatted Code
if (!SEC_hasRights('forum.edit')) {
echo COM_siteHeader();
echo COM_startBlock($LANG_GF00['access_denied']);
echo $LANG_GF00['admin_only'];
echo COM_endBlock();
echo adminfooter();
echo COM_siteFooter(true);
exit();
}
Geeklog components by PortalParts -- www.portalparts.com
