Web Wiz Support and Community Forums : Security Question https://forums.webwiz.net/ Copyright (c) 2006-2013 Web Wiz Forums - All Rights Reserved. Tue, 07 Apr 2026 14:44:07 +0000 Thu, 15 Jan 2004 23:04:32 +0000 http://blogs.law.harvard.edu/tech/rss Web Wiz Forums 12.08 360 https://forums.webwiz.net/RSS_post_feed.asp?TID=8754 <![CDATA[Web Wiz Support and Community Forums]]> https://forums.webwiz.net/forum_images/web_wiz_forums.png https://forums.webwiz.net/ <![CDATA[Security Question : It&#039;s ok, I am getting a new...]]> https://forums.webwiz.net/security-question_topic8754_post47269.html#47269 Author: KnightBurner
Subject: 8754
Posted: 15 January 2004 at 11:04pm

It's ok, I am getting a new server now, so I am going to end up moving all the files and starting the forums from scratch, thanks for your time though, I really appreciate it. ]]> Thu, 15 Jan 2004 23:04:32 +0000 https://forums.webwiz.net/security-question_topic8754_post47269.html#47269 <![CDATA[Security Question : You need to follow the install...]]> https://forums.webwiz.net/security-question_topic8754_post46795.html#46795 Author: WebWiz-Bruce
Subject: 8754
Posted: 14 January 2004 at 5:54am

You need to follow the install instructions for free web hosts:-

http://www.webwiz.net/web_wiz_forums/docs_free_host_in stall.asp

The active users feature needs to be disabled on free web hosts, thisis because free web hosts share application veraibles between all userson the server, so if someone else is using web wiz forums on their siteon the same server you will also see active users for that personsforum.

This doesn't effect security.


Edited by -boRg-]]> Wed, 14 Jan 2004 05:54:16 +0000 https://forums.webwiz.net/security-question_topic8754_post46795.html#46795 <![CDATA[Security Question : Well I am using a free host, but...]]> https://forums.webwiz.net/security-question_topic8754_post46751.html#46751 Author: KnightBurner
Subject: 8754
Posted: 13 January 2004 at 11:00pm

Well I am using a free host, but this problem has not arisen at all, and guest permissions are all off, I have it set that you must be registered to view any part of the forums, all I know is that over a period of about 15 minutes, this name was on the active users list, and said to be logged in, and then it dissapeared, so I don't know, nothing on the forums has a modded file except a few changes I made in the skin file.inc to change some of the colors and images around, that was all.]]> Tue, 13 Jan 2004 23:00:05 +0000 https://forums.webwiz.net/security-question_topic8754_post46751.html#46751 <![CDATA[Security Question : Also please note that if you are...]]> https://forums.webwiz.net/security-question_topic8754_post46225.html#46225 Author: WebWiz-Bruce
Subject: 8754
Posted: 11 January 2004 at 4:32pm

Also please note that if you are suing a free web host the active userslist needs to be disabled in the admin area as it won't work correctly.

The reason for this is that on free hosts you share the ASP applicationwith other sites on the server, so if someone else is running the forumthen the active users list will show data that is for their forum.
]]> Sun, 11 Jan 2004 16:32:06 +0000 https://forums.webwiz.net/security-question_topic8754_post46225.html#46225 <![CDATA[Security Question : This should not be possible, if...]]> https://forums.webwiz.net/security-question_topic8754_post46224.html#46224 Author: WebWiz-Bruce
Subject: 8754
Posted: 11 January 2004 at 4:30pm

This should not be possible, if it where there would be a flood of posts on this issue within hours.

Check that you don't have corrupted files, that your security settingsfor forums are correct (eg. you don't have guest posting enabled,etc.), and that you are not running a modded file that is corsing this.
]]> Sun, 11 Jan 2004 16:30:12 +0000 https://forums.webwiz.net/security-question_topic8754_post46224.html#46224 <![CDATA[Security Question : I have the forums on my website,...]]> https://forums.webwiz.net/security-question_topic8754_post45978.html#45978 Author: KnightBurner
Subject: 8754
Posted: 11 January 2004 at 12:40am

I have the forums on my website, the 7.6 version, and I think there is a flaw in the quick login, anyone that types in a username and password on there gets logged in, even if they have no account, and when you click on the name of them on the active users list at the bottom, it comes up "no user profile available", DUNGNGUYEN is the name of the main person that has done it several times now, even though as far as I can tell they have not been able to access anything, it still seems like a security problem.

Any questions, or comments you can give me as to this?

]]> Sun, 11 Jan 2004 00:40:39 +0000 https://forums.webwiz.net/security-question_topic8754_post45978.html#45978