Web Wiz - Green Windows Web Hosting

  New Posts New Posts RSS Feed - Possible Security Bug
  FAQ FAQ  Forum Search   Events   Register Register  Login Login

Possible Security Bug

 Post Reply Post Reply
Author
kbannon View Drop Down
Groupie
Groupie


Joined: 03 October 2002
Location: Ireland
Status: Offline
Points: 115
Post Options Post Options   Thanks (0) Thanks(0)   Quote kbannon Quote  Post ReplyReply Direct Link To This Post Topic: Possible Security Bug
    Posted: 05 July 2003 at 4:40am

Just a quickie - I was asked to place a forum up on a site which is reserved just for about a dozen people. Therefore the forum is configured not to allow new registrations nor can guests view threads (I know that it may be better off within a members area). The screen appears relatively blank which is fine.

However, if anyone does a search say for an 'e' then they can view pretty much every topic. Clicking on the topics though does not let them view the thread.

Just thought I'd let you know.



Edited by kbannon
I don't suffer from insanity, I enjoy every minute of it.
Back to Top
donhill View Drop Down
Groupie
Groupie
Avatar

Joined: 06 June 2003
Location: Australia
Status: Offline
Points: 66
Post Options Post Options   Thanks (0) Thanks(0)   Quote donhill Quote  Post ReplyReply Direct Link To This Post Posted: 05 July 2003 at 6:43am

Yes you are correct and thx for pointing this out.

If you place the code here in the search_form.asp it will direct all guests to the login page each time. Place it after all the includes and the <%

' Redirect guests to the login page
If blnGuest Then Response.Redirect "login_user.asp"

Back to Top
donhill View Drop Down
Groupie
Groupie
Avatar

Joined: 06 June 2003
Location: Australia
Status: Offline
Points: 66
Post Options Post Options   Thanks (0) Thanks(0)   Quote donhill Quote  Post ReplyReply Direct Link To This Post Posted: 05 July 2003 at 5:59pm

Further to this one.

Above fix stops guests accessing forums via search bug but once registered and in the forums the search button if ALL FORUMS is selected allows results from ALL Forums not just the forums allwoed for that user.



Edited by donhill
Back to Top
 Post Reply Post Reply

Forum Jump Forum Permissions View Drop Down

Forum Software by Web Wiz Forums® version 12.08
Copyright ©2001-2026 Web Wiz Ltd.


Become a Fan on Facebook Follow us on X Connect with us on LinkedIn Web Wiz Blogs
About Web Wiz | Contact Web Wiz | Terms & Conditions | Cookies | Privacy Notice

Web Wiz is the trading name of Web Wiz Ltd. Company registration No. 05977755. Registered in England and Wales.
Registered office: Web Wiz Ltd, Unit 18, The Glenmore Centre, Fancy Road, Poole, Dorset, BH12 4FB, UK.

Prices exclude VAT at 20% unless otherwise stated. VAT No. GB988999105 - $, € prices shown as a guideline only.

Copyright ©2001-2026 Web Wiz Ltd. All rights reserved.