Dear FireBoard users,
In order to further develope the need of Joomla for a robust forum, FireBoard component has been moved to its own new home and new name. You can find more information regarding the Kunena, the successor of FireBoard, at kunena.com. The current forum here will stay for some time more for referencing needs. You can find the FireBoard files under joomlacode.org and other files
Upgrading to Kunena is highly recommended!

Kunena! - To Speak!

A revolution is coming... Kunena - Swahili for: To Speak! THE Next generation of native Joomla based Forum ultra component. Forget what you know about Joomla based forums...
Amazingly Simple Lean and Clean Easier Customization
Kunena is about to redefine the world of Joomla! with the most simplistic ultra component out there. For ultimate performance based on state of the art development techniques, Kunena! is about to bring you... With an integrated plugin system that will allow you to extend Kunena beyond your wildest imaginations...
bug report: access restriction is not secure
TOPIC: bug report: access restriction is not secure
#25826
bug report: access restriction is not secure 9 Years, 12 Months ago  
For a forum category I set the access restriction to \"manager\", and choose to include child forums. Now the category, child forums and its messages should be invisible to those which don\'t have \'manager\' access, right? Right! And true, in the forum index there they are invisible (for those lacking the access level). However, the \'recent posts\' section shows the messages posted in the access restricted category, and when I\' even logged out and click on them I get to see the message, though I will not be able to reply. Sadly, this means that - even when I disable the recent posts plugin, the retricted access messages are not securely hidden and so, not safe at all. Looks like a serious bug to me. I really need to secure a hidden section of the forum, so I guess I have to look for another forum module?
#25826
bug report: access restriction is not secure 9 Years, 12 Months ago  
For a forum category I set the access restriction to \"manager\", and choose to include child forums. Now the category, child forums and its messages should be invisible to those which don\'t have \'manager\' access, right? Right! And true, in the forum index there they are invisible (for those lacking the access level). However, the \'recent posts\' section shows the messages posted in the access restricted category, and when I\' even logged out and click on them I get to see the message, though I will not be able to reply. Sadly, this means that - even when I disable the recent posts plugin, the retricted access messages are not securely hidden and so, not safe at all. Looks like a serious bug to me. I really need to secure a hidden section of the forum, so I guess I have to look for another forum module?
#26965
Re:bug report: access restriction is not secure 9 Years, 11 Months ago  
This bug was already identified for the team, and we will be report to the it Core Team.

Thank you.

Cu, Trorram
Page: 1