Simple Machines Community Forum

SMF Support => SMF 2.0.x Support => Topic started by: ummizu on December 24, 2013, 08:32:17 PM

Title: Guest moderating the topic
Post by: ummizu on December 24, 2013, 08:32:17 PM
Hi
today who's online showed a guest "moderating the topic"
I looked up the IP 49.212.189.70 and saw an entry in project honey pot so I banned it.

What does it mean that a guest is moderating?
Title: Re: Guest moderating the topic
Post by: Bob Perry of Web Presence Consulting on December 24, 2013, 08:41:42 PM
Check your permissions settings closely to be sure you haven't given guests that permission...
Title: Re: Guest moderating the topic
Post by: Kindred on December 24, 2013, 10:30:07 PM
remember, just because you see it in the "who's online" does not mean that they user is actually DOING that action.... it just means that they attempted to access the specific action url associated with the reported action.

Since I know the action url format, I could go to your site, using a moderation action (e.g. index.php?action=moderate) and the system will report me as accessing the moderation section...  it doesn't mean that I as actually able to COMPLETE the action... just that the url was called.
Title: Re: Guest moderating the topic
Post by: Bob Perry of Web Presence Consulting on December 24, 2013, 10:38:46 PM
Quote from: Kindred on December 24, 2013, 10:30:07 PM
remember, just because you see it in the "who's online" does not mean that they user is actually DOING that action.... it just means that they attempted to access the specific action url associated with the reported action.

Since I know the action url format, I could go to your site, using a moderation action (e.g. index.php?action=moderate) and the system will report me as accessing the moderation section...  it doesn't mean that I as actually able to COMPLETE the action... just that the url was called.

Yes, and you should see related errors in the SMF Error log
Title: Re: Guest moderating the topic
Post by: Arantor on December 25, 2013, 12:12:22 AM
Unlikely. Most such cases do not log errors.