First I add the function that Richard posted about to inc_func_secure.asp.
In active.asp, I made the following edits:
line 193, I added the part in red: allowSql = "SELECT FORUM_ID, F_PRIVATEFORUMS, F_PASSWORD_NEW, F_SUBJECT"
line 215 (in red) was added: fF_PASSWORD_NEW = 2
fF_SUBJECT = 3
line 222 (in red) was added: Forum_FPasswordNew = allAllowedData(fF_PASSWORD_NEW,RowCount)
Forum_Subject = allAllowedData(fF_SUBJECT,RowCount)
line 235 was change by adding the part in red and changing the function name in green: if chkForumAccessNew(Forum_PrivateForums,Forum_FPasswordNew,Forum_Subject,Forum_ID, MemberID) = true then
line 484-508 were deleted: canView = true
if strPrivateForums = "1" and mLev < 4 then
select case Forum_PrivateForums
case 2 '## password
select case Request.Cookies(strUniqueID & "Forum")("PRIVATE_" & Forum_Subject)
case Forum_FPasswordNew
canView = true
case else
canView = false
end select
case 3,7 '## Either Password or Allowed Member(already covered)/Member
if MemberID > 0 then
canView = true
else
select case Request.Cookies(strUniqueID & "Forum")("PRIVATE_" & Forum_Subject)
case Forum_FPasswordNew
canView = true
case else
canView = false
end select
end if
case else
canView = true
end select
end if
new line 484 was added (in red): canView = chkForumAccessNew(Forum_PrivateForums , Forum_FPasswordNew, Forum_Subject, Forum_ID, MemberID)
if canView then
that's it I believe.