Invision Community 4: SEO, prepare for v5 and dormant account notifications By Matt Monday at 02:04 PM
recifbox Posted May 19, 2016 Posted May 19, 2016 ok about this message i understand guest try to use the sidebar live configuration tool, i didn't see were the click to get it and how they could generate this error ? You do not have permission to manage the sidebar : 3S172/1
Daddy Posted March 31, 2017 Posted March 31, 2017 This was most likely triggered by said guest adding the php function trigger on your url: www.yourdomain.com/?_blockManager=1 Few possibilities A curious crawler This may of been triggered by you while in the block manager. This happens when your cookies are removed or expire. Check the IP to confirm this. This also could of been a malicious attempt by a member but regardless this doesn't really pose an inanimate threat unless you have custom blocks. I suggest just double checking the IP of the guest who triggered it. Could of been an accident or as said above a curious crawler.
Chris027 Posted March 31, 2017 Posted March 31, 2017 This is strange. It was a regular site member who triggered it. I can't image he put the php function trigger on the url. I use custom blocks. Could this be an issue?
Daddy Posted March 31, 2017 Posted March 31, 2017 @Chris027 With custom blocks you pose the risk of said persons adding an html redirect or just completely defacing your website using html/php scripts. Let's double check your permissions. 1) In your ACP navigate to Members -> Moderators 2) Go through every group listed and ensure Can manage sidebar? permission node is toggled off. Do this for every group that shouldn't have said access. Once that's done there's really nothing more you can do. The error was generated after a permission_denied event which clearly indicates said member has no permissions. He was either being curious or it was a member with block management access whom logged out.
Recommended Posts
Archived
This topic is now archived and is closed to further replies.