1
Reintjan
Hide userinfo to guests
  • 2007/3/13 16:28

  • Reintjan

  • Not too shy to talk

  • Posts: 144

  • Since: 2005/3/17


When not logged in guests still can see userinfo by googling or simply type userinfo.php?uid=1

For securityreasons i don't want this to happen so i changed userinfo.php right after:

include_once XOOPS_ROOT_PATH.'/class/module.textsanitizer.php';

and inserted this line:

$xoopsUser or redirect_header('index.php', 3, _NOPERM);

Maybe its possible to let people decide through settings in a next version whether they want to grand acces to guests or not.

Same for search.php
Be smart, stay smart. Stay one step ahead...

2
Anonymous
Re: Hide userinfo to guests
  • 2008/11/15 17:38

  • Anonymous

  • Posts: 0

  • Since:


Thank you .. tested on 2.0.18.2 and previous

Login

Who's Online

400 user(s) are online (313 user(s) are browsing Support Forums)


Members: 0


Guests: 400


more...

Donat-O-Meter

Stats
Goal: $100.00
Due Date: Nov 30
Gross Amount: $0.00
Net Balance: $0.00
Left to go: $100.00
Make donations with PayPal!

Latest GitHub Commits