"Last Posts" Interaction problem
http://bb.bbboy.net/support-viewthread?forum=1&thread=2097
Powered By BbBoard - http://bb.bbboy.net

Xanathar
17:55:22 Thu
Nov 7 2002
"Last Posts" Interaction problem
I've found that a member of our board can read a read-protected thread if he clicks the "interact" drop-down menu on a mod's post and selects "last posts". This will allow the member to view posts placed even in Read-protected threads, like our "moderator only" thread. This can be a problem.

Is there any way to disable that particular option in the "Interact" menu, or to block posts in read-protected areas from appearing in the "last posts" section?

BbAdminMod
19:12:10 Thu
Nov 7 2002
Re: "Last Posts" Interaction problem
When you say "read protected threads", I guess you mean threads posted in a private forum?

At any rate, if this is happening, it should not be - let me check into this and get back to you. :smile:

BbAdminMod
19:24:10 Thu
Nov 7 2002
Re: "Last Posts" Interaction problem
I just tested this extensively and it's not possible for an unauthorised person to view posts made in a private forum. The list of 5 last posts in the Interact menu only includes those made in public forums, even if posts have been made in a private forum as well. :smile:

The member concerned that reported this, must therefore have had authority to view those posts. :smile:

[Edited By BbAdminMod at 19:50:45 Thu Nov 7 2002]


Xanathar
21:30:30 Thu
Nov 7 2002
Re: "Last Posts" Interaction problem
It's not a private forum, it's a thread with Read-protection set on it. What CoWiE did was find a mod's post in another thread, click on the interact drop-down box, and select "last posts". It would then show all the last posts of that mod, INCLUDING posts in the read-protected thread. Perhaps I wasn't clear, or you misunderstood.

Rahtanax
22:01:49 Thu
Nov 7 2002
Re: "Last Posts" Interaction problem


Rahtanax
22:05:48 Thu
Nov 7 2002
Re: "Last Posts" Interaction problem
Oops. Sorry about that. Accidentally hit the wrong reply button. Meant to hid "add reply". I just used this, my normal user account, to check and see if this security glitch works. Indeed it does. If you want proof, go to Ed's Lounge, find one of any mod's posts, and on the upper right corner of it click the interact drop-down menu. Select last posts, set # of posts to view to 100, and look for any posts from the "Moderator Only" thread, which is read protected. I guarantee you'll see one for Xanathar.

BbAdminMod
22:34:16 Thu
Nov 7 2002
Re: "Last Posts" Interaction problem
OK, I'll look into this - I thought you meant threads in a private forum. Meanwhile, I'd suggest moving read protected threads into a moderators forum. This bug once verified, won't actually be fixed until the next upgrade. Thanks for bringing it to our attention though. :smile:

Xanathar
22:39:50 Thu
Nov 7 2002
Re: "Last Posts" Interaction problem
Alright, so long as you're aware with plans to fix it, I don't mind. In the meantime I'll talk over your workaround with the real owner of the board, Ed, and see if he minds me setting that up. After all, I'm just the assistant admin, I can't do much without his approval except when he's not able to give it. :spinsmile:

Thanks for all the prompt help. Much better than what I've seen other forum support systems provide.

BbAdminMod
23:46:52 Thu
Nov 7 2002
Re: "Last Posts" Interaction problem
I've been unable to reproduce this problem on the bb server - posts in read protected threads are definitely not viewable by unauthorised users. :smile:

This means that the problem is either specific to your board or to the server it's on. I'll report it as such and see if BbBoy can shed any light on the matter. Meanwhile, as I said before, it would really be best to keep "moderator only" threads in a private moderators forum. :smile:

BbAdminMod
20:40:22 Fri
Nov 8 2002
Re: "Last Posts" Interaction problem
OK, an adjustment has been made which hopefully will stop this happening - it will be in the next release (1.3.9).

If after that, you notice it still happens, let us know, OK? :smile:

Xanathar
14:18:58 Sat
Nov 9 2002
Re: "Last Posts" Interaction problem
Will do. Thanks for the prompt support and workaround.

BbAdmin
17:29:58 Sat
Nov 9 2002
Re: "Last Posts" Interaction problem
Hi Xanathar,

Welcome to Best Board's Support forums. :wink: I wanted to pop in here and thank you for reporting this so that we could find and fix it on our end. BbAdminMod's diligent investigation and findings helped BbBoy get the fix ready to be released in the next release. Thanks again for taking time to report this issue. :wink:



"Last Posts" Interaction problem
http://bb.bbboy.net/support-viewthread?forum=1&thread=2097
Powered By BbBoard - http://bb.bbboy.net