News:

SMF 2.1.4 has been released! Take it for a spin! Read more.

Main Menu

Deleted Posts Visible On Search!

Started by Altzone, June 24, 2018, 06:06:16 AM

Previous topic - Next topic

Altzone

Hi
I have a deleted posts section that is supposed to be only visible to Admins and moderators, but I just discovered that I can search for keywords without any account logged in and see these deleted posts listed in the search results.
This is not right, how can I fix this?

Thanks
Dave.

CORRECTION: Sorry, I'm using v2.0.15 and not 2.1.x Feel free to move this thread.

Arantor

Check the permissions on that board - it sounds like guests have access to that board.

Aleksi "Lex" Kilpinen

First things first, are you sure the board is not visible to guests?
You can effectively "hide" a board by making it a child of a restricted board, but that would still leave it accessible by finding a direct link.
You should make sure the board is actually restricted, and not just hidden.
Slava
Ukraini!


"Before you allow people access to your forum, especially in an administrative position, you must be aware that that person can seriously damage your forum. Therefore, you should only allow people that you trust, implicitly, to have such access." -Douglas

How you can help SMF

Altzone

Quote from: Arantor on June 24, 2018, 06:07:55 AM
Check the permissions on that board - it sounds like guests have access to that board.

It's only visible to admins and moderators.
I checked and it uses the "Default" permission, is this the problem?

Arantor

Can you take a screenshot of the configuration of the board itself please?

Altzone

Quote from: Arantor on June 24, 2018, 06:15:30 AM
Can you take a screenshot of the configuration of the board itself please?

Is this what you want?

Aleksi "Lex" Kilpinen

Odd, why two check boxes?
That should be OK, only one group checked, but....
Slava
Ukraini!


"Before you allow people access to your forum, especially in an administrative position, you must be aware that that person can seriously damage your forum. Therefore, you should only allow people that you trust, implicitly, to have such access." -Douglas

How you can help SMF

Arantor


Altzone

Quote from: Arantor on June 24, 2018, 06:22:23 AM
View Only Boards mod added?

I don't know what that is, so I'll say no :->

Arantor

You must have something installed - SMF does not give you two tickboxes by default, you get a single tickbox for a group that can see a board or not.

Illori



Aleksi "Lex" Kilpinen

Somethings not right there, you obviously have some mod or other kind of modification that is interfering with the access permissions, but I don't see one in the list.
Slava
Ukraini!


"Before you allow people access to your forum, especially in an administrative position, you must be aware that that person can seriously damage your forum. Therefore, you should only allow people that you trust, implicitly, to have such access." -Douglas

How you can help SMF

shawnb61

I would suspect tapatalk, I believe it has hooks into security.

Unrelated note: I think you need to deinstall the mysqli driver before installing 2.0.15.   
Address the process rather than the outcome.  Then, the outcome becomes more likely.   - Fripp

Advertisement: