You are not logged in. Please login or register.
PunBB Forums → PunBB 1.2 bug reports → Missing check(s) in moderate.php
Well, one check kind of leads to the other 
Anyway, it's possible to delete the first post in a topic without deleting the topic (it took me tinkering with a Firefox extension I have to get it to happen though).
The second is that, because of the first, you can cause an SQL error (since it deletes the post and therefore the last_post info can't be updated) and have a topic with no posts in it (pointless, yes).
Oh, and one more: you can move a topic to a non existant forum. Unlikely, true, and it can be moved back, but shouldn't happen
Mmm, found another: it lists my secret admin forum to moderators when they move a thread and allows them to move stuff there (as well as to forums that only admins should be able to move stuff to, because no one else has permission to post there, and if a mod can move stuff there it's about the same as posting)
The bugs you pointed out in the first two posts is not something I will tend to. Yes, a moderator can e.g. remove the first post in a topic (and not the topic itself) by sending a custom request, but why would he/she? I'm pretty sure there are a few more such "bugs". Fixing them will add quite a lot of code and I'm not sure it's worth it.
The bug in the third post however needs to be dealt with. I will look into it ASAP.
Notice: Undefined index: move_to_forum in c:\apache\apache\imperial\public_html\forum\moderate.php on line 294
If there's no forum to move to
PunBB Forums → PunBB 1.2 bug reports → Missing check(s) in moderate.php
Powered by PunBB, supported by Informer Technologies, Inc.