(2017-08-05, 08:44 PM)TheCheeseMaster16 Wrote: Security Breech to view people's privacy PM's
Since I'm making a bot for the miuna shoutbox, I realized a security hole while creating a bot.
If a user put in this code,
they have the option to view PM's from other people to other people whenever a message gets editedsocket.on('updmsg', function(upd) { username = $("."+upd._id).find('.username_msgShout').text(); if (upd.uid !== '121352702'){ console.warn("EDITED:\n\n"+username+"\n"+upd.uid+"\n\n"+upd.msg); } })
https://community.mybb.com/thread-166773...pid1257501
anyway you can try use Develop branch of Miuna Shoutbox Server
https://github.com/martec/Miuna-Shoutbox...ee/Develop
or
https://github.com/martec/Miuna-Shoutbox...ee/Develop
It has not been tested, so I do not know if it works.
Of cource, you need deploy Miuna Shoutbox Server with Develop branch