security problem

Get help with installation and running phpBB 3.0.x here. Please do not post bug reports, feature requests, or MOD-related questions here.
Get Involved
Forum rules
END OF SUPPORT: 1 January 2017 (announcement)
Locked
ding
Registered User
Posts: 25
Joined: Sun Mar 01, 2009 4:50 pm

security problem

Post by ding »

I found when I'm logged out if I click on "who is online" then on a user name I can see all there details. Is this just on my board and a Problem I need to sort or is it a PHP3 problem.


Support Request Template
What version of phpBB are you using? phpBB 3.0.4
What is your board's URL? http://finstrokes.com/scubaforum/index.php
Who do you host your board with? wiserhosting
How did you install your board? I used the download package from phpBB.com
Is your board a fresh install or a conversion? Fresh Install
Do you have any MODs installed? Yes
What MODs do you have installed? ajax chat and a twilightBB template
Please describe your problem. I found when I'm logged out if I click on "who is online" then on a user name I can see all there details. Is this just on my board and a Problem I need to sort or is it a PHP3 problem.
What styles do you currently have installed? twilightBB
What language(s) is your board currently using? english
Which database type/version are you using? I Don't Know
What is your level of experience? New to PHP and phpBB
Generated by SRT Generator ($Rev: 2931 $)
Last edited by ding on Thu Apr 30, 2009 2:49 pm, edited 1 time in total.
Pit$Bull
Former Team Member
Posts: 23099
Joined: Sat Dec 02, 2006 4:08 pm
Name: Can't Remember

Re: security problem

Post by Pit$Bull »

That is an administrator 'tool', yes it is normal.
swissboney3
Registered User
Posts: 56
Joined: Sat Jul 02, 2005 2:32 pm

Re: security problem

Post by swissboney3 »

hmmm surely though if you're logged out you shouldnt be able to see it? when i log out on my forums the "who is online" link is disabled
Tyrone Westall
Disclaimer:

any support i give is not guaranteed to work, so if it messes up your phpbb,computer,computer equipment etc. then dont blame me, because i will not be held responsible. you have been warned.
Pit$Bull
Former Team Member
Posts: 23099
Joined: Sat Dec 02, 2006 4:08 pm
Name: Can't Remember

Re: security problem

Post by Pit$Bull »

Sorry, I missed the "when logged out" statement.
You should check your permissions.
Knowledge Base - phpBB3 Permissions
Guests should not have access to this information.
Please use the Support Request Template Generator to fill out the support template for you and then post it here.



Thank you swissboney3 for bringing this to my attention.
ding
Registered User
Posts: 25
Joined: Sun Mar 01, 2009 4:50 pm

Re: security problem

Post by ding »

Have added the template to my original post
User avatar
stevemaury
Support Team Member
Support Team Member
Posts: 51456
Joined: Thu Nov 02, 2006 12:21 am
Location: The U.P.
Name: Steve
Contact:

Re: security problem

Post by stevemaury »

In Groups forum permissions, give the Guests group a Read only access Role on all forums. In group permissions for the Guests group, Advanced permissions, select All No and submit.
For REALLY good and VERY inexpensive hosting CLICK HERE

I can stop all your spam. I can upgrade or update your Board. PM or email me. (Paid support)
ding
Registered User
Posts: 25
Joined: Sun Mar 01, 2009 4:50 pm

Re: security problem

Post by ding »

Have done the permitions and I can still see the "who is online" any ideas
narqelion
I've Been Banned!
Posts: 7235
Joined: Sat Dec 13, 2008 5:00 pm
Contact:

Re: security problem

Post by narqelion »

@ding, can you do what I asked the other person in this post and report back the results?
ding
Registered User
Posts: 25
Joined: Sun Mar 01, 2009 4:50 pm

Re: security problem

Post by ding »

Dont understand the permitions yet

it worked and thank you for the help.

Will have to study the permitions more..... :D
Locked

Return to “[3.0.x] Support Forum”