Jump to content

Is it a security bug?


Guest Cool Surfer

Recommended Posts

Posted

If the admin creates a thread and doesnt want it ti be read by anyone, then theres no option to create post and set invisible on submitting the post.
Something like pin, unpinn, close tpic on posting.

There is a time delay to unapprove a new topic. First the topic has to be created n posted.

During this time if someone is viewing profile of the admin and repeatedly he is refreshing the page, he will come to know that the admin is creating a post. and once created, he can open the post in another tab. Once in browser cache, he can read the sensitive data, even if it s marked invisibleafter 5 seconds.

Posted

I have suggested this before also, specifically because I have nomination forums that I want under moderation but if one of my global moderators or myself post we have the ability to bypass the moderation queue by default but in those forums I do not want us to bypass the queue. I have to unfortunately turn off being able to bypass moderator queues and set it on a per forum basis.

Archived

This topic is now archived and is closed to further replies.

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...