• Registered: 2006-02-06
  • Posts: 19

Topic: anyone can post

Hello - can you give me a quick pointer, please?

I confess to having made some slight mods (mainly to page content) but it now seems that anyone can post - even if unregistered - and their post shows up in the forum as from an Administrator, which is embarrassing since, naturally, such posts are almost always porn spam!

Evidently I need to fix something, to ensure that post.php is only available to genuinely logged-in users yikes
Where should I be looking to do this??

Thank you
the forum itself is here: http://homeholistics.com/new_share/foru … m.php?id=5

Cherry.

  • Smartys
  • Former PunBB Developer
  • Offline
  • Registered: 2004-04-30
  • Posts: 7,844

Re: anyone can post

Well, that sounds like two issues: one with viewtopic.php or include/functions.php (the admin tag).
Check the usergroup permissions first

3 Reply by Cherry (edited by Cherry 2007-07-11 13:53)

  • Registered: 2006-02-06
  • Posts: 19

Re: anyone can post

Thanks - I'm trying to figure it out wink

There are some entries in the database that look a bit odd to me, like users with a group_id of 32000.
Is that any kind of a clue as to what's gone wrong??

EDITED to add:
Might it be easier to fix the database, then add some code to post.php that double-checks the user is logged in?

That is, it might be easier if I knew what to add! I'd love a pointer .... please :confused:

Thanks again -

  • Smartys
  • Former PunBB Developer
  • Offline
  • Registered: 2004-04-30
  • Posts: 7,844

Re: anyone can post

There are some entries in the database that look a bit odd to me, like users with a group_id of 32000.
Is that any kind of a clue as to what's gone wrong??

Those are normal, unactivated users.

And you shouldn't have to add any code, you should figure out what you edited incorrectly and fix it wink

5 Reply by Cherry (edited by Cherry 2007-07-11 15:58)

  • Registered: 2006-02-06
  • Posts: 19

Re: anyone can post

Fair point, Smartys!

And thanks for the explanation smile

Cherry.

And ... thanks a bunch to the six people who posted spam in the hour after I wrote this post [sigh].