1
When not logged in guests still can see userinfo by googling or simply type userinfo.php?uid=1
For securityreasons i don't want this to happen so i changed userinfo.php right after:
include_once XOOPS_ROOT_PATH.'/class/module.textsanitizer.php';
and inserted this line:
$xoopsUser or redirect_header('index.php', 3, _NOPERM);
Maybe its possible to let people decide through settings in a next version whether they want to grand acces to guests or not.
Same for search.php
Be smart, stay smart. Stay one step ahead...