RSS bug

Started by gljukonaft, August 31, 2010, 01:40:55 PM

Previous topic - Next topic

gljukonaft

Hi !

I have SMF 1.1.11 with options "allow_guestAccess" (non-readable for guests).
Users report for me about error with working RSS.

RSS is working only when user is logged. If not: instead RSS forum produced XHTML.

Users say about RSS client (www_rssowl_org) that can get RSS via login/password access. This client as well don't work.

Thank You !

Oya

if your forum isnt open to guests the rss wont work because otherwise anyone could read it without signing up... not a bug

rssowl doesnt know how to deal with smf login though but its not a bug in smf here either because rssowl only supports http standard login methods not smfs nor really any other forum

gljukonaft

Quote from: Oya on August 31, 2010, 02:27:55 PM
if your forum isnt open to guests the rss wont work because otherwise anyone could read it without signing up... not a bug

Yes, it "semi-bug". When user not is logged, forum can give RSS with error message about login.

Quote from: Oya on August 31, 2010, 02:27:55 PM
rssowl doesnt know how to deal with smf login though but its not a bug in smf here either because rssowl only supports http standard login methods not smfs nor really any other forum

I not known. I not use rssowl. This ask the user.


Oya

still not really a bug its just trying to protect your forum since rss doesnt have any options for logins on its own

rssowl does not work with smf and rssowl would need to be upgraded to work with it

gljukonaft

Quote from: Oya on August 31, 2010, 05:43:27 PM
still not really a bug its just trying to protect your forum since rss doesnt have any options for logins on its own

rssowl does not work with smf and rssowl would need to be upgraded to work with it

Other user say about client Liferea. Also not work.
User is suspecting that SMF not support RSS login in format: "http://login:password@URL".

Oya

no it doesnt like i already said

and really that is very insecure since every single pageload the password has to be sent unencrypted which means it would be trivial for a packetsniffer to grab the password

Advertisement: