Web Wiz Forums - Worrying security matter

Print Page | Close Window

Worrying security matter

Printed From: Web Wiz Forums
Category: Web Wiz Web App Support Forums
Forum Name: Web Wiz Forums
Forum Description: Support forum for Web Wiz Forums application.
URL: https://forums.webwiz.net/forum_posts.asp?TID=25088
Printed Date: 04 April 2026 at 5:15am
Software Version: Web Wiz Forums 12.08 - https://www.webwizforums.com

Topic: Worrying security matter

Posted By: Nick-V
Subject: Worrying security matter
Date Posted: 03 January 2008 at 11:58am

I believe I have found a worrying security hole.

If a member is downgraded from a private forum they still receive email subscriptions.

To expand: we have a private forum for special members. Those members often subscribe to receive an email alert of new postings to that forum. When a member is demoted from that private forum their email alert remains operational and continues to send them a private email containing the full text of any posting made to that private forum.

This worries me considerably...people are usually demoted from private areas with good reason...and administrators (and others) are completely unaware that they are still being sent private information.

I can use database tools as a workaround (delete such subscriptions) but I believe:

administrators need to be made aware of this immediately
a modification needs to be done to correct such orphaned subscriptions and prevent them recurring.

Replies:

Posted By: WebWiz-Bruce
Date Posted: 03 January 2008 at 12:10pm

This will be looked into.

For the moment you can always use the 'Subscription' tab in the 'Members Control Panel' and see what Topics and Forums the users is subscribed to and remove any subscriptions that you do not want this user to receive.

-------------
https://www.webwiz.net/web-wiz-forums/forum-hosting.htm" rel="nofollow - Web Wiz Forums Hosting
https://www.webwiz.net/web-hosting/windows-web-hosting.htm" rel="nofollow - ASP.NET Web Hosting

Posted By: Nick-V
Date Posted: 03 January 2008 at 12:38pm

Thanks Borg.

Yes for now, we will check manually forum and topic subscriptions too for any member downgraded from a private area.