DKPSystem.com - Forum RSS insecurity

Forum RSS insecurity

Back to the Tickets List
Forum RSS insecurity
Creator	ron_post
Public or Private	Public Private tickets are only accessible to you and to DKPSystem.com staff Public Tickets are visible to everyone)
Status	Closed
Type	Bug
Section of the Site	Forum
Urgency	(0 votes)
Rating	(0 votes)
Description: The forum security features (restricting what posts users have access to, including what non-logged in users can see) do not prevent users (and guests) from using the Forum RSS feed to get titles to all posts. This can be somewhat problematic if you tend to use descriptive titles. Of course, the posts themselves are still restricted - clicking on the link will only take you to the forum, not the post.
Official DKPSystem.com Comments No official comments yet

User-Submitted Comments These posts are also available on the forum with more features. This page is intentional simplified View this info on the forum

[You must be logged in to post comments]

5047 days ago Chops Said:
Thank you, a fix for this should be deployed soon. [You must be logged in to reply]

5038 days ago Chops Said:
The fix for this has been deployed, along with a couple simple aesthetic changes (like showing Thread Tag for posts). [You must be logged in to reply]

5006 days ago ron_post Said:
Thanks for the fix! Of course, now it appears that even if you are logged in, you only get the guest viewable posts in the rss feed (I know, no satisfying some people ). [You must be logged in to reply]

5006 days ago Chops Said:
Quote by ron_post Thanks for the fix! Of course, now it appears that even if you are logged in, you only get the guest viewable posts in the rss feed (I know, no satisfying some people ). For that, make sure you use the "Private RSS Feed" (link found in the logged in box) The public RSS feed should ALWAYS be just the publicly available stuff, while the private RSS feed is specific to you. [You must be logged in to reply]

Login:
Password: