UBB.Developers Forums UBB.threads 6 Bug Reports The unauthorised have access

Just to let you know that you users can access forums that have been hidden from them by going directly to the showflat or showthread pages. They obviously have to be able to figure out the correct URL but I have had users actually do that, once there they can access the rest of that board.

The fix is simple. Find the following block of code in showflat and show threaded
// ---------------------------
// Grab some forum information
$Board_q = addslashes($Board);
$query = "
SELECT Bo_Title,Bo_Write_Perm,Bo_CatName,Bo_Cat
FROM w3t_Boards
WHERE Bo_Keyword = '$Board_q'
$groupquery # Add this line here
";

Add in the line with the comment "# Add this line here"
That will fix it.

Can this be added to the next release please.

Dan

Apply the fix to showthreaded.php too!

Thanks for the information and the fix!