The secure CMS.

Welcome to Geeklog, Anonymous Friday, November 29 2024 @ 12:47 pm EST

Geeklog Forums

Feed Writer Class Forum hack

 New Topic  Post Reply
 08/14/05 11:03am (Read 2,062 times)  
Status: offline

Toby W. Allen

Forum User
Newbie
Registered: 03/20/04
Posts: 9
I don't know if anyone noticed this - but if you have private forums, the new feed writer classes will allow people to see the private threads.

Try it for yourself, and see.

Toby.
 Quote
 08/15/05 03:37pm  
Status: offline

Dirk

Site Admin
Admin
Registered: 01/12/02
Posts: 13073
Location:Stuttgart, Germany
That would be a bug in the forum then, though. The feed writers don't have to do any permission checks, simply because they have no way of knowing what sort of permissions a plugin implements.

bye, Dirk
 Quote
 New Topic  Post Reply
All times are EST. The time is now 12:47 pm.
  • Normal Topic
  • Sticky Topic
  • Locked Topic
  • New Post
  • Sticky Topic W/ New Post
  • Locked Topic W/ New Post
  •  View Anonymous Posts
  •  Able to post
  •  Filtered HTML Allowed
  •  Censored Content