SECURITY ISSUE - Open User Profil !!

Roland
OFFLINE
Posts: 161
Thanks: 16
Karma: 11

13 years 1 week ago - 13 years 1 week ago #179296 by Roland

SECURITY ISSUE - Open User Profil !! was created by Roland

Hello,

today some user complaint that all profiles open for public.

I don't know when or why these happens.

I had in configuration => Userprofile => the second one "Alle registrierten User" like " All registered users". And this works in former time.

Now I switched to "Registered" and all profiles are blocked now.

www.simple-quality.de - The Quality-Web-Portal

Attachments:

Last edit: 13 years 1 week ago by Roland.

Please Log in or Create an account to join the conversation.

jojo12
OFFLINE
Posts: 957
Thanks: 109
Karma: 25

13 years 1 week ago #179298 by jojo12

Replied by jojo12 on topic Re: Open User Profil !!

It seems to be the following problem:

I asked in another post:

The difference between "all registered users" and "registered" in group access

Krileon wrote about "all registered users":

custom usergroup that doesn't actually exist in Joomla. It's purely PHP and done through GJs API.

Only with "registered" it's only for registered users!

The following user(s) said Thank You: Roland

Please Log in or Create an account to join the conversation.

Roland
OFFLINE
Posts: 161
Thanks: 16
Karma: 11

13 years 1 week ago - 13 years 1 week ago #179299 by Roland

Replied by Roland on topic Re: Open User Profil !!

Thanks for help...

Strange issue... I don't made an update in the last days... And I don't installed groupjive... So for me it's a heavy security issue...

www.simple-quality.de - The Quality-Web-Portal

Last edit: 13 years 1 week ago by Roland.

Please Log in or Create an account to join the conversation.

jojo12
OFFLINE
Posts: 957
Thanks: 109
Karma: 25

13 years 1 week ago - 13 years 1 week ago #179300 by jojo12

Replied by jojo12 on topic Re: Open User Profil !!

Sorry, I think it's an general community builder problem!

Last edit: 13 years 1 week ago by jojo12.

Please Log in or Create an account to join the conversation.

krileon
ONLINE
Posts: 48435
Thanks: 8275
Karma: 1443

13 years 1 week ago - 13 years 1 week ago #179344 by krileon

Replied by krileon on topic Re: Open User Profil !!

This is a known bug that "All Registered Users" functions like "Everybody" on J1.6/J1.7. The workaround is to select "Registered" usergroup.

Kyle (Krileon)
Community Builder Team Member
Before posting on forums: Read FAQ thoroughly + Read our Documentation + Search the forums
CB links: Documentation - Localization - CB Quickstart - CB Paid Subscriptions - Add-Ons - Forge
--
If you are a Professional, Developer, or CB Paid Subscriptions subscriber and have a support issue please always post in your respective support forums for best results!
--
If I've missed your support post with a delay of 3 days or greater and are a Professional, Developer, or CBSubs subscriber please send me a private message with your thread and will reply when possible!
--
Please note I am available Monday - Friday from 8:00 AM CST to 4:00 PM CST. I am away on weekends (Saturday and Sunday) and if I've missed your post on or before a weekend after business hours please wait for the next following business day (Monday) and will get to your issue as soon as possible, thank you.
--
My role here is to provide guidance and assistance. I cannot provide custom code for each custom requirement. Please do not inquire me about custom development.

Last edit: 13 years 1 week ago by krileon.

The following user(s) said Thank You: jojo12

Please Log in or Create an account to join the conversation.

jojo12
OFFLINE
Posts: 957
Thanks: 109
Karma: 25

13 years 1 week ago #179347 by jojo12

Replied by jojo12 on topic Re: Open User Profil !!

Yes, but who knows it. And who should know that!

Please Log in or Create an account to join the conversation.

Moderators: beat, nant, krileon