Invision Community 4: SEO, prepare for v5 and dormant account notifications Matt November 11, 2024Nov 11
Posted June 3, 20231 yr Hi, I set a support forum to Type: Questions and have the permission matrix for Guests set to See Forum and Read Question. But a spam bot overnight showed me that the Guest can post a question even if the permission says they can't. I even tested it out in private mode in my browser. Thoughts?
June 4, 20231 yr Author Ya it seems that the permissions are set to disallow Guest from posting but can read and see the forms. So not sure if this may be a bug as they can post even when the permissions disallow it.
June 4, 20231 yr If you mean they can create new topics and the topics are not visible to anyone, it’s the Post Before Registering doing its job. It checks the Member group (the one in your conf_global.php) permissions . Edited June 4, 20231 yr by Adriano Faria
June 4, 20231 yr Author The forum is visible to anybody who goes to the URL. They can see and read it per the permission set (like the above image) They can ask a new question even if it disallows in the permissions. They are not even signing up it bots and they are being seen as Guests as they never sign in. But they can post questions when the forum thread is set to questions and not just a basic forum thread. PostWithOutPermission.mp4 This is what I mean.
June 5, 20231 yr Author 5 hours ago, Marc Stridgen said: Please update access details on file, so I can take a look for you I just updated the access details.
June 5, 20231 yr Solution 21 hours ago, ZakRhyno said: The forum is visible to anybody who goes to the URL. They can see and read it per the permission set (like the above image) They can ask a new question even if it disallows in the permissions. They are not even signing up it bots and they are being seen as Guests as they never sign in. But they can post questions when the forum thread is set to questions and not just a basic forum thread. PostWithOutPermission.mp4 795.69 kB · 0 downloads This is what I mean. This looks like an issue with one of your third party applications/plugins. When I disable all of those, I am getting a Post Before Registration screen which is correct per your settings.
June 5, 20231 yr Author I 1 hour ago, Jim M said: This looks like an issue with one of your third party applications/plugins. When I disable all of those, I am getting a Post Before Registration screen which is correct per your settings. I went back to recreating what you've done and disable all applications/plugs to see which one was the cause of this. But upon doing that I get the same thing tha happens before even with all the items turn off. I try Firefox and Chrome in private mode but gotten the same thing. Could you share what you may have done different then what I have? Edited June 5, 20231 yr by ZakRhyno
June 6, 20231 yr Im not sure what it is you are seeing at present, but currently its showing correctly, as its showing that an email has to be entered. This is post before register, which you can switch off at system>Settings>Posting The issue however is it is not showing email address on your site when 3rd party applications are active. Instead its showing "your name", which is what would usually show on guest posting It looks like this is being caused by the 3rd party application "Application Forms"
June 6, 20231 yr Author What I mean is when the application is disabled and the setting are they are set. I have Guests only to see and read the forum's posts. I disable the ability to post, yet they still can as it is currently. I posted the picture below showing the permission matrix. If it is set this way how can they still post something?
June 6, 20231 yr @Marc Stridgen is talking about this: or this: If any of these is not extending properly the class, will cause this error. Not sure which one you use, so I showed both.
June 6, 20231 yr Author 1 minute ago, Adriano Faria said: @Marc Stridgen is talking about this: or this: If any of these is not extending properly the class, will cause this error. Not sure which one you use, so I showed both. Correct, when the application is turned on it is doing what we talk about in the thread above. But when everything is turned off and the permission are set as they are, Guest shouldn't be allowed to post anything just read and access it. But they still can post a Q&A to the forums as is. This makes no sense as they way it is setup as I understand it means they shouldn't be able to do so. Edited June 6, 20231 yr by ZakRhyno
June 6, 20231 yr 41 minutes ago, ZakRhyno said: Correct, when the application is turned on it is doing what we talk about in the thread above. But when everything is turned off and the permission are set as they are, Guest shouldn't be allowed to post anything just read and access it. But they still can post a Q&A to the forums as is. This makes no sense as they way it is setup as I understand it means they shouldn't be able to do so. They should as you have post before register switched on. So they post, and it then doesnt show until they register. If you wish not to have that happen you would need to switch off the setting mentioned
August 31, 20231 yr Author On 6/6/2023 at 7:37 AM, Marc Stridgen said: They should as you have post before register switched on. So they post, and it then doesnt show until they register. If you wish not to have that happen you would need to switch off the setting mentioned I just gotten this.