Author |
Topic  |
|
mdelcour2000
Junior Member
 
United States
133 Posts |
Posted - 01 January 2008 : 19:37:16
|
Ruirub, Anon, or someone, I had one of my posters email me just now. He claimed he could Google another site in our county and add the word "password" on at the end, then it would pull up my forum (I checked it out and it does). The only problem is, when he clicks on that link, he is able to edit posts and anything else he wants to (just as long as he is signed in). I checked it out and sure enough it does this. If you Google, "lacledecountymissouri.org password password" my site pulls up and you will be able to edit some posts and profiles. Any thoughts on how to fix this? |
http://lacledeforum.com/
"Never get so busy doing the work of the kingdom that you forget who the King is" |
Edited by - mdelcour2000 on 01 January 2008 19:41:01 |
|
Biddyman
Starting Member
32 Posts |
Posted - 01 January 2008 : 20:06:08
|
I tried and it linked to advrider.com |
 |
|
AnonJr
Moderator
    
United States
5768 Posts |
Posted - 01 January 2008 : 21:48:33
|
What version of the forum are you running? Some of the older versions had some security issues that were fixed in later releases. |
 |
|
Shaggy
Support Moderator
    
Ireland
6780 Posts |
Posted - 02 January 2008 : 04:45:48
|
quote: Originally posted by mdelcour2000 ... just as long as he is signed in ...
I fail to see the problem?
|
Search is your friend “I was having a mildly paranoid day, mostly due to the fact that the mad priest lady from over the river had taken to nailing weasels to my front door again.” |
 |
|
pdrg
Support Moderator
    
United Kingdom
2897 Posts |
Posted - 02 January 2008 : 07:17:55
|
I tried that search, all I got was some phpBB site as the only result?! |
 |
|
mdelcour2000
Junior Member
 
United States
133 Posts |
Posted - 02 January 2008 : 10:10:37
|
I am running 3.4.06. I tried Googling on another computer with the same result. Here is the Google search link http://www.google.com/search?hl=en&q=lacledecountymissouri.org+password
So far nothing has happened. No one has changed anything.
I am sorry I typed "password" in 2wice up top. Just google "lacledecountymissouri.org password" |
http://lacledeforum.com/
"Never get so busy doing the work of the kingdom that you forget who the King is" |
 |
|
mdelcour2000
Junior Member
 
United States
133 Posts |
Posted - 02 January 2008 : 10:12:09
|
quote: Originally posted by Shaggy
quote: Originally posted by mdelcour2000 ... just as long as he is signed in ...
I fail to see the problem?
They are not his posts.
I am sorry. I found my problem. It wasn't that he was being able to "edit" the posts. When you click the link, it is a reply with a quote. However, why does it let you do that if you are not logged in? |
http://lacledeforum.com/
"Never get so busy doing the work of the kingdom that you forget who the King is" |
Edited by - mdelcour2000 on 02 January 2008 10:15:35 |
 |
|
Shaggy
Support Moderator
    
Ireland
6780 Posts |
Posted - 02 January 2008 : 10:20:53
|
Because, unless registration is required, you don't need to be logged in order to post to the forums.
|
Search is your friend “I was having a mildly paranoid day, mostly due to the fact that the mad priest lady from over the river had taken to nailing weasels to my front door again.” |
 |
|
bobby131313
Senior Member
   
USA
1163 Posts |
Posted - 02 January 2008 : 10:59:42
|
Make sure that post.asp is blocked in your robots.txt file...
User-agent: *
Disallow: /default/post.asp
With that disallow line in there, in 30-45 days or so Google will remove all those from their database. The big search engines will comply, some smaller ones may not. |
Switch the order of your title tags |
 |
|
mdelcour2000
Junior Member
 
United States
133 Posts |
Posted - 02 January 2008 : 16:11:01
|
thnkx everyone. |
http://lacledeforum.com/
"Never get so busy doing the work of the kingdom that you forget who the King is" |
 |
|
|
Topic  |
|