Customizing SMF > Modifications and Packages
View Only Boards
simon36:
A couple of posts above it has been installed fine but users can still enter the protected board.
andershz:
This is a very useful mod, but the way it's implemented is questionable from a security point of view.
It works by adding all the boards where the user has view-only access to the predefined database query "query_see_boards" which originally just holds the boards where the user has at least read access.
Then at (hopefully) all relevant places an extra check is added to see if the user has view-only access to the board and if so preventing the user from seeing posts etc.
This method of first giving the users more access than they should have and then removing some of it is not so good in principle.
If this extra check is forgotten in any place the user can see posts which should not be seen.
It also means that if any other mod is added where "query_see_boards" is used that mod will give the users access to posts they shouldn't see because in that mod there will be no checks for view-only boards.
In practice I noticed this with the articles system in SimplePortal, which displays complete articles from boards the logged in user (or guest) do not have access to when this mod is installed.
I imagine similar problems could occur with for instance other portals or Tapatalk.
hvdcgkl:
--- Quote from: ibloomdrop on September 05, 2011, 03:40:33 PM ---I have read through pretty much all 28 pages of this thread. I have SMF 2.0 and I'm desperately trying to get this mod to work.
Obviously, the package installer doesn't work. I tried manually making changes to the files and did the best I could with the ones that weren't exact.
I have no idea what to do with DB_2_x.php. I uploaded it to the root directory and tried to just run it but get the error: Cannot install - please verify you put this in the same place as SMF's index.php. (which I'm pretty sure I did)
After making all other manual changes to files, Admin >> Forum >> Boards gives a db error:
Unknown column 'b.member_groups_view' in 'field list'
File: /home/ebrain/public_html/Sources/Subs-Boards.php
Line: 1055
This is why I assume the DB_2_x.php process is missing but I don't know how to process it.
If anyone could help me resolve this it would be greatly appreciated. I've looked at all other mods and this is the only one I can find to do what I need. I have a new forum but would like one section for paid membership, and I'd like everyone to be able to see that this board is there... just not read its contents.
If you require more info for assistance, please just ask and I'll do my best to provide it. Thanks in advance.
--- End quote ---
Hi,
I've exactly the same problem ....
DB_2_x.php doesn't want to be executed....
i am on 2.0.2 SMF version
so this mod doesn't want to work ...
really disapointed.
hiboy:
Is this normal,
i just installed this mod , and when i set visibility (tick second box only) and access (first box not tick) and Show the message index for "view only" boards (not tick) for guest for a board.
with the above setting, the board when guest click ,it redirect them to login page.
But that board show recent topics to guest at the right side.
How do i not show the recent topic, number of post and number of topics?
most preferred the field replaced with a '-'
Zerschmetterling:
I've got a Problem with the Childboards... the 'view-only' ones are not showing :(
Navigation
[0] Message Index
[#] Next page
[*] Previous page
Go to full version