BlueMax wrote on Jan 16
th, 2008 at 8:42am:
Small bug discovered - or a setting I missed.
I installed the BoardPass MOD, went on with very little trouble and it works great.
But if you are also running the RSS feeds, the posts in the locked forum is displayed to everyone.
Unless I missed a setting, I think this is a bug.
Thanks for all your hard work!
Max
Hi
thnx for Bugreport. Confirmed and edit this File. (thnx for MF-B for Code.
RSS.pl<search for>
### Security check ###
if (&AccessCheck($currentboard, '', $boardperms) ne 'granted') { &RSS_error('no_access'); }
if ($annboard eq $board && !$iamadmin && !$iamgmod) { &RSS_error('no_access'); }
</search for>
<add after>
if (${$uid.$currentboard}{'brdpasswr'}){
my $cookiename = "$cookiepassword$currentboard$username";
my $crypass = ${$uid.$currentboard}{'brdpassw'};
if (!$iamadmin && !$iamgmod && !$iammod && $yyCookies{$cookiename} ne $crypass) { &RSS_error('no_access'); }
}
</add after>
<search for>
my $access = &AccessCheck($curboard, '', $boardperms);
if (!$iamadmin && $access ne 'granted') { next; }
</search for>
<add after>
if (${$uid.$curboard}{'brdpasswr'}){
my $cookiename = "$cookiepassword$curboard$username";
my $crypass = ${$uid.$curboard}{'brdpassw'};
if (!$iamadmin && !$iamgmod && !$iammod && $yyCookies{$cookiename} ne $crypass) { next; }
}
</add after>
NOTE: This Fix will in next BoardPass Version if YaBB 2.2.1 released. Because Most of user have Bugfixes installed and is not more Compatible with current modfile. Just edit this file until next Version is updated.
Pages: 
BoardPass V1.8/1.9 for YaBB 2.2.2/2.2.3 (Read 23715 times)
