Search Returning Unauthorized Topics
Printed From: Web Wiz Forums
Category: Web Wiz Web App Support Forums
Forum Name: Web Wiz Forums
Forum Description: Support forum for Web Wiz Forums application.
URL: https://forums.webwiz.net/forum_posts.asp?TID=18100
Printed Date: 13 April 2026 at 1:47pm
Software Version: Web Wiz Forums 12.08 - https://www.webwizforums.com
Topic: Search Returning Unauthorized Topics
Posted By: Dr Moocowz
Subject: Search Returning Unauthorized Topics
Date Posted: 23 January 2006 at 9:59pm
|
I made a discovery on the wwf I administer. I guess some background on my forum structure first before explaining in a bit more detail on the subject. Background I believe I have 7.9 installed (not the newest iteration, but could an issue there too) I have my forum divided into 2 primary sections: Public and Private. The public section is a place where all users can post and read freely (including Guests). The private section requires extra permissions on the individual registered users' account to gain access to these. I also have a mod installed that HIDES all the private sections to users who do not have these permissions. So the principal idea is to keep unwanted users out. Problem in Detail I logged out of my account and used the search function on the forum (so I should be just a 'Guest'). While the 'Search Forum' dropdown does not display ALL(public and private) categories (which is correct), using the "All forums" option still means ALL forums, regardless of user permissions. So basically, its returning topics that a user does not have permissions to see.  While it still does the proper permissions check if you try to click on the topic and access it, I do not think it should have ever been returned.What Questions to be Answered Having read the background and describing the problem, I would like to know. 1. Is this a known issue? 2. Has it been officially addressed or will be officially addressed? 3. What can I do to prevent topics with insufficient user permissions to be returned in the Search function? Thanks for your time :) |
Replies:
Posted By: WebWiz-Bruce
Date Posted: 24 January 2006 at 2:25pm
|
This is a very old known issue and is due to the database design of version 7.x, version 8 will have a different database so this issue no-longer exists. Although the search feature will list topics subjects that the user is not allowed to view, the user can not view the actual posts. For seacurity reasons you should upgrade your forum to the latest version. ------------- https://www.webwiz.net/web-wiz-forums/forum-hosting.htm" rel="nofollow - Web Wiz Forums Hosting https://www.webwiz.net/web-hosting/windows-web-hosting.htm" rel="nofollow - ASP.NET Web Hosting |