ZakRhyno Posted June 3, 2023 Share Posted June 3, 2023 Hi, I set a support forum to Type: Questions and have the permission matrix for Guests set to See Forum and Read Question. But a spam bot overnight showed me that the Guest can post a question even if the permission says they can't. I even tested it out in private mode in my browser. Thoughts? Link to comment Share on other sites More sharing options...
ZakRhyno Posted June 4, 2023 Author Share Posted June 4, 2023 Ya it seems that the permissions are set to disallow Guest from posting but can read and see the forms. So not sure if this may be a bug as they can post even when the permissions disallow it. Link to comment Share on other sites More sharing options...
Adriano Faria Posted June 4, 2023 Share Posted June 4, 2023 (edited) If you mean they can create new topics and the topics are not visible to anyone, it’s the Post Before Registering doing its job. It checks the Member group (the one in your conf_global.php) permissions . Edited June 4, 2023 by Adriano Faria Link to comment Share on other sites More sharing options...
ZakRhyno Posted June 4, 2023 Author Share Posted June 4, 2023 The forum is visible to anybody who goes to the URL. They can see and read it per the permission set (like the above image) They can ask a new question even if it disallows in the permissions. They are not even signing up it bots and they are being seen as Guests as they never sign in. But they can post questions when the forum thread is set to questions and not just a basic forum thread. PostWithOutPermission.mp4 This is what I mean. Link to comment Share on other sites More sharing options...
Marc Stridgen Posted June 5, 2023 Share Posted June 5, 2023 Please update access details on file, so I can take a look for you Link to comment Share on other sites More sharing options...
ZakRhyno Posted June 5, 2023 Author Share Posted June 5, 2023 5 hours ago, Marc Stridgen said: Please update access details on file, so I can take a look for you I just updated the access details. Link to comment Share on other sites More sharing options...
Solution Jim M Posted June 5, 2023 Solution Share Posted June 5, 2023 21 hours ago, ZakRhyno said: The forum is visible to anybody who goes to the URL. They can see and read it per the permission set (like the above image) They can ask a new question even if it disallows in the permissions. They are not even signing up it bots and they are being seen as Guests as they never sign in. But they can post questions when the forum thread is set to questions and not just a basic forum thread. PostWithOutPermission.mp4 795.69 kB · 0 downloads This is what I mean. This looks like an issue with one of your third party applications/plugins. When I disable all of those, I am getting a Post Before Registration screen which is correct per your settings. Link to comment Share on other sites More sharing options...
ZakRhyno Posted June 5, 2023 Author Share Posted June 5, 2023 (edited) I 1 hour ago, Jim M said: This looks like an issue with one of your third party applications/plugins. When I disable all of those, I am getting a Post Before Registration screen which is correct per your settings. I went back to recreating what you've done and disable all applications/plugs to see which one was the cause of this. But upon doing that I get the same thing tha happens before even with all the items turn off. I try Firefox and Chrome in private mode but gotten the same thing. Could you share what you may have done different then what I have? Edited June 5, 2023 by ZakRhyno Link to comment Share on other sites More sharing options...
ZakRhyno Posted June 5, 2023 Author Share Posted June 5, 2023 Link to comment Share on other sites More sharing options...
Marc Stridgen Posted June 6, 2023 Share Posted June 6, 2023 Im not sure what it is you are seeing at present, but currently its showing correctly, as its showing that an email has to be entered. This is post before register, which you can switch off at system>Settings>Posting The issue however is it is not showing email address on your site when 3rd party applications are active. Instead its showing "your name", which is what would usually show on guest posting It looks like this is being caused by the 3rd party application "Application Forms" Link to comment Share on other sites More sharing options...
ZakRhyno Posted June 6, 2023 Author Share Posted June 6, 2023 What I mean is when the application is disabled and the setting are they are set. I have Guests only to see and read the forum's posts. I disable the ability to post, yet they still can as it is currently. I posted the picture below showing the permission matrix. If it is set this way how can they still post something? Link to comment Share on other sites More sharing options...
Adriano Faria Posted June 6, 2023 Share Posted June 6, 2023 @Marc Stridgen is talking about this: or this: If any of these is not extending properly the class, will cause this error. Not sure which one you use, so I showed both. Link to comment Share on other sites More sharing options...
ZakRhyno Posted June 6, 2023 Author Share Posted June 6, 2023 (edited) 1 minute ago, Adriano Faria said: @Marc Stridgen is talking about this: or this: If any of these is not extending properly the class, will cause this error. Not sure which one you use, so I showed both. Correct, when the application is turned on it is doing what we talk about in the thread above. But when everything is turned off and the permission are set as they are, Guest shouldn't be allowed to post anything just read and access it. But they still can post a Q&A to the forums as is. This makes no sense as they way it is setup as I understand it means they shouldn't be able to do so. Edited June 6, 2023 by ZakRhyno Link to comment Share on other sites More sharing options...
Marc Stridgen Posted June 6, 2023 Share Posted June 6, 2023 41 minutes ago, ZakRhyno said: Correct, when the application is turned on it is doing what we talk about in the thread above. But when everything is turned off and the permission are set as they are, Guest shouldn't be allowed to post anything just read and access it. But they still can post a Q&A to the forums as is. This makes no sense as they way it is setup as I understand it means they shouldn't be able to do so. They should as you have post before register switched on. So they post, and it then doesnt show until they register. If you wish not to have that happen you would need to switch off the setting mentioned Link to comment Share on other sites More sharing options...
ZakRhyno Posted June 6, 2023 Author Share Posted June 6, 2023 Thanks Marc Stridgen 1 Link to comment Share on other sites More sharing options...
ZakRhyno Posted August 31, 2023 Author Share Posted August 31, 2023 On 6/6/2023 at 7:37 AM, Marc Stridgen said: They should as you have post before register switched on. So they post, and it then doesnt show until they register. If you wish not to have that happen you would need to switch off the setting mentioned I just gotten this. Link to comment Share on other sites More sharing options...
Marc Stridgen Posted August 31, 2023 Share Posted August 31, 2023 Glad to hear you got where you needed to be Link to comment Share on other sites More sharing options...
Recommended Posts