|
|
|
|
Joined: Jan 2003
Posts: 141
Journeyman
|
|
Journeyman
Joined: Jan 2003
Posts: 141 |
Is there any way at all that a regular user can manipulate anything to read someone else's pm's? I have some sensitive pm's with the other administrator that I haven't told anyone about and there is a user from a competing forum that has hinted to the subject matter. I know myself and the other admin wouldn't leak any information.
|
|
|
|
|
Joined: Nov 2001
Posts: 10,369
I type Like navaho
|
|
I type Like navaho
Joined: Nov 2001
Posts: 10,369 |
I don't think you can manipulate the URL to see another user's PMs. You can do it if you have the ability to become the user...or access to the Database.
|
|
|
|
|
Joined: Jan 2003
Posts: 141
Journeyman
|
|
Journeyman
Joined: Jan 2003
Posts: 141 |
I know the admins can do it. I was just wondering if there was any way possible for a regular user to do it. The users in question might be just poking a stick in the dark but they really seem to know alot about what goes on with material that is only discussed in pm's with the other admin. Hmm.....
BTW Thanks!
Last edited by dman; 03/13/2003 3:09 PM.
|
|
|
|
|
Joined: Nov 2001
Posts: 10,369
I type Like navaho
|
|
I type Like navaho
Joined: Nov 2001
Posts: 10,369 |
Yeah, there isn't really a message number or anything passed in a URL. The script authenticates the user, then displays their PMs.
Are you on 6.2. Earlier version may have been more possible. 6.2 is quite a bit more secure in that regard.
|
|
|
|
|
Joined: Jan 2003
Posts: 141
Journeyman
|
|
Journeyman
Joined: Jan 2003
Posts: 141 |
Yessir, 6.2. Thanks alot, you have put my mind at ease a little bit. 
|
|
|
|
|
Joined: Jan 2003
Posts: 141
Journeyman
|
|
Journeyman
Joined: Jan 2003
Posts: 141 |
One more quick question. (sorry to be a pain)
I really want to keep alot of these messages but delete them from the server. Is there a way to save them all to my harddrive as an archive or something like that? All at the same time? I have over 250 of them.
|
|
|
|
|
Joined: Nov 2001
Posts: 10,369
I type Like navaho
|
|
I type Like navaho
Joined: Nov 2001
Posts: 10,369 |
Not really. The best way, is to use the Email PM hack here that just dave wrote. It allows you to check the box next to them and then clikc "Email". Then they come to you via email. Once you are sure you have them, then you can delete them from threads.
|
|
|
|
|
Joined: Nov 2001
Posts: 10,369
I type Like navaho
|
|
I type Like navaho
Joined: Nov 2001
Posts: 10,369 |
Here it is.
|
|
|
|
|
Joined: Jan 2003
Posts: 141
Journeyman
|
|
Journeyman
Joined: Jan 2003
Posts: 141 |
|
|
|
Donate to UBBDev today to help aid in Operational, Server and Script Maintenance, and Development costs.
Please also see our parent organization VNC Web Services if you're in the need of a new UBB.threads Install or Upgrade, Site/Server Migrations, or Security and Coding Services.
|
|
|
Posts: 1,157
Joined: July 2001
|
|
|
Forums63
Topics37,573
Posts293,925
Members13,849
| |
Most Online5,166
Sep 15th, 2019
|
|
Currently Online
Topics Created
Posts Made
Users Online
Birthdays
|
|
|
|
|
|
