Snitz Forums 2000
Snitz Forums 2000
Home | Profile | Register | Active Topics | Members | Search | FAQ
Username:
Password:
Save Password
Forgot your Password?

 All Forums
 Snitz Forums 2000 DEV-Group
 DEV Bug Reports (Closed)
 Restricted Forums still show up in active.asp
 Forum Locked  Topic Locked
 Printer Friendly
Previous Page
Author Previous Topic Topic Next Topic
Page: of 2

Nikkol
Forum Moderator

USA
6907 Posts

Posted - 19 June 2003 :  17:52:58  Show Profile
First I add the function that Richard posted about to inc_func_secure.asp.

In active.asp, I made the following edits:

line 193, I added the part in red:
	allowSql = "SELECT FORUM_ID, F_PRIVATEFORUMS, F_PASSWORD_NEW, F_SUBJECT"


line 215 (in red) was added:
		fF_PASSWORD_NEW = 2
		fF_SUBJECT = 3


line 222 (in red) was added:
			Forum_FPasswordNew = allAllowedData(fF_PASSWORD_NEW,RowCount)
			Forum_Subject = allAllowedData(fF_SUBJECT,RowCount)


line 235 was change by adding the part in red and changing the function name in green:
			if chkForumAccessNew(Forum_PrivateForums,Forum_FPasswordNew,Forum_Subject,Forum_ID, MemberID) = true then


line 484-508 were deleted:
		canView = true
		if strPrivateForums = "1" and mLev < 4 then
			select case Forum_PrivateForums
				case 2 '## password
					select case Request.Cookies(strUniqueID & "Forum")("PRIVATE_" & Forum_Subject)
						case Forum_FPasswordNew
							canView = true
						case else
							canView = false
					end select
				case 3,7 '## Either Password or Allowed Member(already covered)/Member
					if MemberID > 0 then
						canView = true
					else
						select case Request.Cookies(strUniqueID & "Forum")("PRIVATE_" & Forum_Subject)
							case Forum_FPasswordNew
								canView = true
							case else
								canView = false
						end select
					end if
				case else
					canView = true
			end select
		end if


new line 484 was added (in red):
		canView = chkForumAccessNew(Forum_PrivateForums , Forum_FPasswordNew, Forum_Subject, Forum_ID, MemberID)
		if canView then


that's it I believe.

Nikkol ~ Help Us Help You | ReadMe | 3.4.03 fixes | security fixes ~
Go to Top of Page

RichardKinser
Snitz Forums Admin

USA
16655 Posts

Posted - 19 June 2003 :  19:06:46  Show Profile
That's pretty much the same changes that I did. But, you can just set canView to true, or just remove that whole if/then, because it's not necessary.
Go to Top of Page

Nikkol
Forum Moderator

USA
6907 Posts

Posted - 19 June 2003 :  19:13:45  Show Profile
oh ok ... didn't look at the code all that closely, figured you'd need to check the value that the function returned but I guess that is done earlier in the code.

Nikkol ~ Help Us Help You | ReadMe | 3.4.03 fixes | security fixes ~
Go to Top of Page

RichardKinser
Snitz Forums Admin

USA
16655 Posts

Posted - 24 June 2003 :  04:41:48  Show Profile
(made similar changes in search.asp)

fixed in v3.4.04
Go to Top of Page
Page: of 2 Previous Topic Topic Next Topic  
Previous Page
 Forum Locked  Topic Locked
 Printer Friendly
Jump To:
Snitz Forums 2000 © 2000-2021 Snitz™ Communications Go To Top Of Page
This page was generated in 0.14 seconds. Powered By: Snitz Forums 2000 Version 3.4.07