[Pushed] IP Search shows moderators thread titles even if they have no permission there.
#1
Exclamation 
  • Detailed description of your problem, including steps to reproduce if necessary
Person has mod CP access. It can get the IP address of a user that has view access to a board the moderator doesn't. They go to Mod CP, IP Search and put in the IP address of the user. They will be able to see the TITLES of THREADS the user has created or posted in, even if the mod with Mod CP access doesn't have view permission on these boards.
  • New installation or upgrade (from which version of MyBB)?
1.6

Thanks

P.S: I've temporarily commented out the "Search Posts" checkbox under IP Search, but that's not a very safe solution.
Reply


Messages In This Thread
IP Search shows moderators thread titles even if they have no permission there. - by Monkeys - 2015-05-19, 02:46 AM

Forum Jump:


Users browsing this thread: 1 Guest(s)