MyBB Community Forums
[F] announcement in password protected forum [C-sayakb] - Printable Version

+- MyBB Community Forums (https://community.mybb.com)
+-- Forum: Community Archive (https://community.mybb.com/forum-106.html)
+--- Forum: Archived Forums (https://community.mybb.com/forum-143.html)
+---- Forum: Archived Development and Support (https://community.mybb.com/forum-155.html)
+----- Forum: Archived Bug Reports (https://community.mybb.com/forum-74.html)
+------ Forum: MyBB 1.4.6 (https://community.mybb.com/forum-116.html)
+------ Thread: [F] announcement in password protected forum [C-sayakb] (/thread-48692.html)



[F] announcement in password protected forum [C-sayakb] - frostschutz - 2009-04-22

If a password protected forum has an announcement, users can access it directly by giving the announcements.php?aid=x URL. forumdisplay and showthread call the check_password function for the forum, announcement.php does not.


RE: announcement in password protected forum - Ryan Gordon - 2009-04-22

in announcement.php find:

if($forumpermissions['canview'] == 0 || $forumpermissions['canviewthreads'] == 0)
{
	error_no_permission();
}

Add after:

// Check if this forum is password protected and we have a valid password
check_forum_password($forum['fid']);



[F] announcement in password protected forum - Ryan Gordon - 2009-04-25

Thank you for your bug report.

This bug has been fixed in our internal code repository. Please note that the problem will not be fixed here until these forums are updated.

With regards,
MyBB Group