Invision Community 4: SEO, prepare for v5 and dormant account notifications By Matt Monday at 02:04 PM
ZakRhyno Posted June 3, 2023 Posted June 3, 2023 Hi, I set a support forum to Type: Questions and have the permission matrix for Guests set to See Forum and Read Question. But a spam bot overnight showed me that the Guest can post a question even if the permission says they can't. I even tested it out in private mode in my browser. Thoughts?
ZakRhyno Posted June 4, 2023 Author Posted June 4, 2023 Ya it seems that the permissions are set to disallow Guest from posting but can read and see the forms. So not sure if this may be a bug as they can post even when the permissions disallow it.
Adriano Faria Posted June 4, 2023 Posted June 4, 2023 (edited) If you mean they can create new topics and the topics are not visible to anyone, it’s the Post Before Registering doing its job. It checks the Member group (the one in your conf_global.php) permissions . Edited June 4, 2023 by Adriano Faria
ZakRhyno Posted June 4, 2023 Author Posted June 4, 2023 The forum is visible to anybody who goes to the URL. They can see and read it per the permission set (like the above image) They can ask a new question even if it disallows in the permissions. They are not even signing up it bots and they are being seen as Guests as they never sign in. But they can post questions when the forum thread is set to questions and not just a basic forum thread. PostWithOutPermission.mp4 This is what I mean.
Marc Posted June 5, 2023 Posted June 5, 2023 Please update access details on file, so I can take a look for you
ZakRhyno Posted June 5, 2023 Author Posted June 5, 2023 5 hours ago, Marc Stridgen said: Please update access details on file, so I can take a look for you I just updated the access details.
Solution Jim M Posted June 5, 2023 Solution Posted June 5, 2023 21 hours ago, ZakRhyno said: The forum is visible to anybody who goes to the URL. They can see and read it per the permission set (like the above image) They can ask a new question even if it disallows in the permissions. They are not even signing up it bots and they are being seen as Guests as they never sign in. But they can post questions when the forum thread is set to questions and not just a basic forum thread. PostWithOutPermission.mp4 795.69 kB · 0 downloads This is what I mean. This looks like an issue with one of your third party applications/plugins. When I disable all of those, I am getting a Post Before Registration screen which is correct per your settings.
ZakRhyno Posted June 5, 2023 Author Posted June 5, 2023 (edited) I 1 hour ago, Jim M said: This looks like an issue with one of your third party applications/plugins. When I disable all of those, I am getting a Post Before Registration screen which is correct per your settings. I went back to recreating what you've done and disable all applications/plugs to see which one was the cause of this. But upon doing that I get the same thing tha happens before even with all the items turn off. I try Firefox and Chrome in private mode but gotten the same thing. Could you share what you may have done different then what I have? Edited June 5, 2023 by ZakRhyno
Marc Posted June 6, 2023 Posted June 6, 2023 Im not sure what it is you are seeing at present, but currently its showing correctly, as its showing that an email has to be entered. This is post before register, which you can switch off at system>Settings>Posting The issue however is it is not showing email address on your site when 3rd party applications are active. Instead its showing "your name", which is what would usually show on guest posting It looks like this is being caused by the 3rd party application "Application Forms"
ZakRhyno Posted June 6, 2023 Author Posted June 6, 2023 What I mean is when the application is disabled and the setting are they are set. I have Guests only to see and read the forum's posts. I disable the ability to post, yet they still can as it is currently. I posted the picture below showing the permission matrix. If it is set this way how can they still post something?
Adriano Faria Posted June 6, 2023 Posted June 6, 2023 @Marc Stridgen is talking about this: or this: If any of these is not extending properly the class, will cause this error. Not sure which one you use, so I showed both.
ZakRhyno Posted June 6, 2023 Author Posted June 6, 2023 (edited) 1 minute ago, Adriano Faria said: @Marc Stridgen is talking about this: or this: If any of these is not extending properly the class, will cause this error. Not sure which one you use, so I showed both. Correct, when the application is turned on it is doing what we talk about in the thread above. But when everything is turned off and the permission are set as they are, Guest shouldn't be allowed to post anything just read and access it. But they still can post a Q&A to the forums as is. This makes no sense as they way it is setup as I understand it means they shouldn't be able to do so. Edited June 6, 2023 by ZakRhyno
Marc Posted June 6, 2023 Posted June 6, 2023 41 minutes ago, ZakRhyno said: Correct, when the application is turned on it is doing what we talk about in the thread above. But when everything is turned off and the permission are set as they are, Guest shouldn't be allowed to post anything just read and access it. But they still can post a Q&A to the forums as is. This makes no sense as they way it is setup as I understand it means they shouldn't be able to do so. They should as you have post before register switched on. So they post, and it then doesnt show until they register. If you wish not to have that happen you would need to switch off the setting mentioned
ZakRhyno Posted August 31, 2023 Author Posted August 31, 2023 On 6/6/2023 at 7:37 AM, Marc Stridgen said: They should as you have post before register switched on. So they post, and it then doesnt show until they register. If you wish not to have that happen you would need to switch off the setting mentioned I just gotten this.
Recommended Posts