Simple Machines Community Forum

SMF Support => SMF 2.0.x Support => Topic started by: Langstroth on October 07, 2015, 10:22:44 AM

Title: Guests still accessing private forum when 'Allow guest..' is OFF?
Post by: Langstroth on October 07, 2015, 10:22:44 AM
Set up a private forum using SMF 2.0.11.
Have set "Allow guests to browse forum" to OFF. If I try to login with 'guest' I get the message "That username does not exist". However, I notice that there have been 'guest' members online when I have been on the forum (as Administrator). How is this possible and is it a security problem?

Thanks
Title: Re: Guests still accessing private forum when 'Allow guest..' is OFF?
Post by: Kindred on October 07, 2015, 10:26:01 AM
no... there are no guest users viewing your forum.

Guests listed in the Who's Online list (action=who) are NOT actually viewing the target that it shows...  what they are doing is REQUESTING that URL.

The Who's online list only shows the URLs that are being targeted/requested...   not specifically what is displayed.   What the guest is actually SEEING at that URL is the screen that says "You must log in to view this page"

and no... there is no security problem
Title: Re: Guests still accessing private forum when 'Allow guest..' is OFF?
Post by: Langstroth on October 07, 2015, 10:31:16 AM
Thank you very much for describing the issue so well. All is now Good.