Logged Out
Create an Account
Login:
Password:

Forgot your password?
Forum RSS insecurity
Forum RSS insecurity
[Back to Index]
Thread Tags
Primary: [Tickets]
Secondary: None

System
Moderator
Poster's IP: Logged
Posts: 1006
Threads: 1358
Private Posts: 352
Posted: 4830 days ago
#1
Forum RSS insecurity
Go To This Ticket's Page
Creator ron_post
Public or Private Public
Private tickets are only accessible to you and to DKPSystem.com staff
Public Tickets are visible to everyone)
Status Closed
Type Bug
Section of the Site Forum
Urgency (0 votes)
Rating (0 votes)
Description:
The forum security features (restricting what posts users have access to, including what non-logged in users can see) do not prevent users (and guests) from using the Forum RSS feed to get titles to all posts. This can be somewhat problematic if you tend to use descriptive titles.

Of course, the posts themselves are still restricted - clicking on the link will only take you to the forum, not the post.
Official DKPSystem.com Comments
No official comments yet
[Login to interact]
Chops
Administrator
Poster's IP: Logged
Posts: 7607
Threads: 218
Private Posts: 1160

Site(s):
PiaS
Posted: 4827 days ago
#2
Thank you, a fix for this should be deployed soon.


--
It's all in the reflexes.
[Login to interact]
Chops
Administrator
Poster's IP: Logged
Posts: 7607
Threads: 218
Private Posts: 1160

Site(s):
PiaS
Posted: 4818 days ago
#3
The fix for this has been deployed, along with a couple simple aesthetic changes (like showing Thread Tag for posts).


--
It's all in the reflexes.
[Login to interact]
ron_post
General Public
Poster's IP: Logged
Posts: 19
Threads: 4
Private Posts: 0
Posted: 4786 days ago
#4
Thanks for the fix!

Of course, now it appears that even if you are logged in, you only get the guest viewable posts in the rss feed (I know, no satisfying some people ).
[Login to interact]
Chops
Administrator
Poster's IP: Logged
Posts: 7607
Threads: 218
Private Posts: 1160

Site(s):
PiaS
Posted: 4786 days ago
#5
Quote by ron_post
Thanks for the fix!

Of course, now it appears that even if you are logged in, you only get the guest viewable posts in the rss feed (I know, no satisfying some people ).


For that, make sure you use the "Private RSS Feed"
(link found in the logged in box)

The public RSS feed should ALWAYS be just the publicly available stuff, while the private RSS feed is specific to you.


--
It's all in the reflexes.
[Login to interact]


[Back to Index]


Main | Create a Site | Features | Forum | Knowledge Base | Contact | Privacy Policy

Part of the DKPSystem.com Network.