security problem

Get help with installation and running phpBB 3.0.x here. Please do not post bug reports, feature requests, or MOD-related questions here.
Ideas Centre
Forum rules
END OF SUPPORT: 1 January 2017 (announcement)
Locked
Flegy33
Registered User
Posts: 22
Joined: Fri Jun 24, 2011 6:22 pm
Name: Damir Flekac
Contact:

security problem

Post by Flegy33 »

hello,

I have security problem on my forum, guy can access forum where is only allowed to some members.

on this section is not allowed to no one who dont have permissions to see it
http://www.maxko-forum.info/viewforum.php?f=123

but this guy send me video how he doing cheat
https://youtu.be/D_5K_xt_dU8


any way to block it?
User avatar
KevC
Support Team Member
Support Team Member
Posts: 72329
Joined: Fri Jun 04, 2004 10:44 am
Location: Oxford, UK
Contact:

Re: security problem

Post by KevC »

More likely is that his account is in the group that has access to that forum.

Check his permissions using the permission masks.

permissions
permission masks
View forum based permissions

Select that forum and put his name in the bottom left box of the next page and it'll show you if he has access.
-:|:- Support Request Template -:|:-
Image
"Step up to red alert. Sir, are you absolutely sure? It does mean changing the bulb"
Flegy33
Registered User
Posts: 22
Joined: Fri Jun 24, 2011 6:22 pm
Name: Damir Flekac
Contact:

Re: security problem

Post by Flegy33 »

hi, no he dont have permisions to see forum. Have any way to dont go on google private forums?
User avatar
KevC
Support Team Member
Support Team Member
Posts: 72329
Joined: Fri Jun 04, 2004 10:44 am
Location: Oxford, UK
Contact:

Re: security problem

Post by KevC »

No there isn't.
If you account does not have permission you can't get in.

The other time I've seen something similar is if the hosts are running aggressive caching with things like cloudfare and it caches the sessions and then assigns then to the next person who visits.
-:|:- Support Request Template -:|:-
Image
"Step up to red alert. Sir, are you absolutely sure? It does mean changing the bulb"
User avatar
Brf
Support Team Member
Support Team Member
Posts: 53379
Joined: Tue May 10, 2005 7:47 pm
Location: {postrow.POSTER_FROM}
Contact:

Re: security problem

Post by Brf »

You have allowed Google to see the forum. Therefore, anyone can see that forum from Google's cache.
Locked

Return to “[3.0.x] Support Forum”