I have a bunch of forums setup with access depending on group assignments.  If you aren't a member of the appropriate group then you can't even see the forums.

Now, this morning as I was reading one of those forums I noticed in the "users browsing this topic" list a user who does not have access to that forum, i.e. they can't see any of the topics, etc.

Is this a flaw in the check of users browsing or is there a security issue here that I need to address?

Thanks!

i wouldn't think its a security issue. it might be your MOD.

the script is gone through with a fine comb for bugs, holes etc. have you tried seeing if you can view another forum that the user/you as a test user can not access (ment not be able to).

Ya I tried logging in as a test user and such and I was unable to gain access to anything, and when checking with my admin user I was still unable notice anything out of the ordinary.

But I thought I'd check with you guys as well just to be sure I wasn't seeing some strange anomoly.

Thanks!