*

wp180

  • **
  • 74
    • Punk-Noz.fr
Guests/Offline user can see user profiles
« on: February 19, 2013, 05:41:34 PM »
Hello.

I found a big error here with Osdate 2.6.

It's possible for guest/offline Users to see profiles and more if they use the direct link to it: www.yoursite.com/showprofile.php?id=xxxx

I think its only a wrong option, but where?
Any hints?

wp180
Osdate 2.6
PHP 5.4.21
MsSQL 5.1.72

*

marcam

  • ****
  • 267
Re: Guests/Offline user can see user profiles
« Reply #1 on: February 19, 2013, 10:08:47 PM »
is not bug !
open showprofile.php
find
Code: [Select]
if ( !defined( 'SMARTY_DIR' ) ) {
    include_once( 'init.php' );
}
just after put that
Code: [Select]
include('sessioninc.php');


Hello.

I found a big error here with Osdate 2.6.

It's possible for guest/offline Users to see profiles and more if they use the direct link to it: www.yoursite.com/showprofile.php?id=xxxx

I think its only a wrong option, but where?
Any hints?

wp180
osdate 2.5.4
Flashchat 4.7
php 5.2.7

*

wp180

  • **
  • 74
    • Punk-Noz.fr
Re: Guests/Offline user can see user profiles
« Reply #2 on: February 22, 2013, 03:47:36 PM »
ok, that's it. The sessioninc.php is everywhere only not at showprofile :D

Thanks for helping.
wp180
Osdate 2.6
PHP 5.4.21
MsSQL 5.1.72