Hi, I noticed that it appears possible for a normal member to subscribe to forums that have been marked as private (they appear, but are restricted to the member list). I am using version 3.3.03. Is this a known problem? I would think the icon to subscribe to a private forum should not display when the user does not have access to the forum
Where are they able to subscribe from? What page? What Authorization Type setting do you have on the private forum in question?
«-------------------------------------------------» Read the Do's and Don'ts before you post for help «-------------------------------------------------»
Davio, I just ran a test on my testing forum and have concluded that a normal user can subscribe (and will recieve subscriptions too) any private forum of any authorization type.
Including Allowed members list (Hidden) assuming they subscribed to it before it became hidden from them.
To fix this (unless user password access is stored in the database) subscriptions will not work for password protected forums. We cant check their cookie when sending subscriptions out.
And the Allowed members list fix would work alot like my moderated forum fix. . . . only simpler (thank goodness)
There will be some complications for moderated forums that are allowed member list as well
Any good fix on this? I have sections with allowed lists and hidden allowed lists and just found out that members that have subscriptions (boardwise that I know of) are getting e-mailed the posts.
We are setting up a moderator section and I don't want everyone getting these. I see where I can probably change the query but I'll have to review the forums table to find out how I tell which are allowed, etc.
If someone already has the code, I'd appreciate it.
Topic Locked
Posted - 26 February 2002 : 17:00:53
