Jump to content

Tapatalk users can edit posts without log


Sledge FTB

Recommended Posts

Posted

We're running latest IPS (v4.4.10) and tapatalk plugin (v1.6.3) and it came to our notice that tapatalk users can edit their posts without any logging.
No entry in the moderation logs, no comment underneath their post that it has been editted. If the tapatalk has moderator rights (or higher), he can edit any post of any user without any form of logging.

Very unwanted behaviour and yes - I should probably seek for support with tapatalk, but they probably don't care as much as we/us/IPS-users do.
At least, see it as a warning, but any help would me more than welcome.

Can't wait till a stable production version of the IPS app is available...

Posted

Thank you once more @bfarber. Out of interest, is IPS aware of the issue?
I mean, I'm not looking for a TT-feature, TT is bypassing IPS logs and therefore security on post edits.

I've opened a support ticket with Tapatalk ... we'll see.

 

Courtesy mention: @tapatalk

Posted

Seriously doubt Tapatalk is using the proper controllers and models:

Even back when I was on XenForo with the Tapatalk plugin they went straight for the database, bypassing MFA, registration security questions, etc.

  • 2 weeks later...

Archived

This topic is now archived and is closed to further replies.

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...