Web Wiz - Green Windows Web Hosting - Celebrating 25 Years!

  New Posts New Posts RSS Feed - Search Returning Unauthorized Topics
  FAQ FAQ  Forum Search   Events   Register Register  Login Login

Search Returning Unauthorized Topics

 Post Reply Post Reply
Author
Dr Moocowz View Drop Down
Newbie
Newbie


Joined: 26 January 2004
Location: United States
Status: Offline
Points: 16
Post Options Post Options   Thanks (0) Thanks(0)   Quote Dr Moocowz Quote  Post ReplyReply Direct Link To This Post Topic: Search Returning Unauthorized Topics
    Posted: 23 January 2006 at 9:59pm
I made a discovery on the wwf I administer.

I guess some background on my forum structure first before explaining in a bit more detail on the subject.

Background

I believe I have 7.9 installed (not the newest iteration, but could an issue there too)

I have my forum divided into 2 primary sections: Public and Private.

The public section is a place where all users can post and read freely (including Guests).

The private section requires extra permissions on the individual registered users' account to gain access to these.  I also have a mod installed that HIDES all the private sections to users who do not have these permissions.  So the principal idea is to keep unwanted users out.

Problem in Detail

I logged out of my account and used the search function on the forum (so I should be just a 'Guest').

While the 'Search Forum' dropdown does not display ALL(public and private) categories (which is correct), using the "All forums" option still means ALL forums, regardless of user permissions.

So basically, its returning topics that a user does not have permissions to see. Unhappy  While it still does the proper permissions check if you try to click on the topic and access it, I do not think it should have ever been returned.

What Questions to be Answered

Having read the background and describing the problem, I would like to know.

1. Is this a known issue?
2. Has it been officially addressed or will be officially addressed?
3. What can I do to prevent topics with insufficient user permissions to be returned in the Search function?

Thanks for your time :)
Back to Top
WebWiz-Bruce View Drop Down
Admin Group
Admin Group
Avatar
Web Wiz Developer

Joined: 03 September 2001
Location: Bournemouth
Status: Offline
Points: 9844
Post Options Post Options   Thanks (0) Thanks(0)   Quote WebWiz-Bruce Quote  Post ReplyReply Direct Link To This Post Posted: 24 January 2006 at 2:25pm
This is a very old known issue and is due to the database design of version 7.x, version 8 will have a different database so this issue no-longer exists.

Although the search feature will list topics subjects that the user is not allowed to view, the user can not view the actual posts.

For seacurity reasons you should upgrade your forum to the latest version.
Back to Top
 Post Reply Post Reply

Forum Jump Forum Permissions View Drop Down

Forum Software by Web Wiz Forums® version 12.08
Copyright ©2001-2026 Web Wiz Ltd.


Become a Fan on Facebook Follow us on X Connect with us on LinkedIn Web Wiz Blogs
About Web Wiz | Contact Web Wiz | Terms & Conditions | Cookies | Privacy Notice

Web Wiz is the trading name of Web Wiz Ltd. Company registration No. 05977755. Registered in England and Wales.
Registered office: Web Wiz Ltd, Unit 18, The Glenmore Centre, Fancy Road, Poole, Dorset, BH12 4FB, UK.

Prices exclude VAT at 20% unless otherwise stated. VAT No. GB988999105 - $, € prices shown as a guideline only.

Copyright ©2001-2026 Web Wiz Ltd. All rights reserved.