Forum RSS insecurity
Go To This Ticket's Page
Creator	ron_post
Public or Private	Public Private tickets are only accessible to you and to DKPSystem.com staff Public Tickets are visible to everyone)
Status	Closed
Type	Bug
Section of the Site	Forum
Urgency	(0 votes)
Rating	(0 votes)
Description: The forum security features (restricting what posts users have access to, including what non-logged in users can see) do not prevent users (and guests) from using the Forum RSS feed to get titles to all posts. This can be somewhat problematic if you tend to use descriptive titles. Of course, the posts themselves are still restricted - clicking on the link will only take you to the forum, not the post.
Official DKPSystem.com Comments No official comments yet

Thank you, a fix for this should be deployed soon.

--
It's all in the reflexes.

The fix for this has been deployed, along with a couple simple aesthetic changes (like showing Thread Tag for posts).

--
It's all in the reflexes.

Thanks for the fix!

Of course, now it appears that even if you are logged in, you only get the guest viewable posts in the rss feed (I know, no satisfying some people ).

For that, make sure you use the "Private RSS Feed"
(link found in the logged in box)

The public RSS feed should ALWAYS be just the publicly available stuff, while the private RSS feed is specific to you.

--
It's all in the reflexes.