Web Wiz Support and Community Forums : Worrying security matter https://forums.webwiz.net/ Copyright (c) 2006-2013 Web Wiz Forums - All Rights Reserved. Sat, 04 Apr 2026 03:48:24 +0000 Thu, 03 Jan 2008 12:38:34 +0000 http://blogs.law.harvard.edu/tech/rss Web Wiz Forums 12.08 360 https://forums.webwiz.net/RSS_post_feed.asp?TID=25088 <![CDATA[Web Wiz Support and Community Forums]]> https://forums.webwiz.net/forum_images/web_wiz_forums.png https://forums.webwiz.net/ <![CDATA[Worrying security matter : Thanks Borg. Yes for now, we...]]> https://forums.webwiz.net/worrying-security-matter_topic25088_post130405.html#130405 Author: Nick-V
Subject: 25088
Posted: 03 January 2008 at 12:38pm

Thanks Borg.
 
Yes for now, we will check manually forum and topic subscriptions too for any member downgraded from a private area.
]]> Thu, 03 Jan 2008 12:38:34 +0000 https://forums.webwiz.net/worrying-security-matter_topic25088_post130405.html#130405 <![CDATA[Worrying security matter : This will be looked into.For the...]]> https://forums.webwiz.net/worrying-security-matter_topic25088_post130404.html#130404 Author: WebWiz-Bruce
Subject: 25088
Posted: 03 January 2008 at 12:10pm

This will be looked into.

For the moment you can always use the 'Subscription' tab in the 'Members Control Panel' and see what Topics and Forums the users is subscribed to and remove any subscriptions that you do not want this user to receive.
]]> Thu, 03 Jan 2008 12:10:32 +0000 https://forums.webwiz.net/worrying-security-matter_topic25088_post130404.html#130404 <![CDATA[Worrying security matter : I believe I have found a worrying...]]> https://forums.webwiz.net/worrying-security-matter_topic25088_post130403.html#130403 Author: Nick-V
Subject: 25088
Posted: 03 January 2008 at 11:58am

I believe I have found a worrying security hole.
 
If a member is downgraded from a private forum they still receive email subscriptions.
 
To expand: we have a private forum for special members. Those members often subscribe to receive an email alert of new postings to that forum. When a member is demoted from that private forum their email alert remains operational and continues to send them a private email containing the full text of any posting made to that private forum.
 
This worries me considerably...people are usually demoted from private areas with good reason...and administrators (and others) are completely unaware that they are still being sent private information.
 
I can use database tools as a workaround (delete such subscriptions) but I believe:
  1. administrators need to be made aware of this immediately
  2. a modification needs to be done to correct such orphaned subscriptions and prevent them recurring.
]]> Thu, 03 Jan 2008 11:58:44 +0000 https://forums.webwiz.net/worrying-security-matter_topic25088_post130403.html#130403