Forum security

Hi there, just had one of the forum members point out a security issue to me. The forum contents can be seen by non-members, including all of the posts. How can I close this off so that only members can see the forum contents, including the Navbar (or the contents the Navbar buttons lead to) up top?

Cheers

Hi,

Go in to your AC-P -> General -> Forum >> Categories and forums set Permissions by clicking the permissions icon

Great, thanks, but non-members can still see who the members of the forum are by going to the Members button

What you mean now i dont understand can you explain a bit more.

Okay, since I can't seem to put an image of the forum on this thread (if someone can explain where I go to get the URL of an image so I can post it in this message as well that would be good), here is our forum: http://kskssgroup.forumotion.co.uk/login Now, you will see that there are three buttons in the Navbar. I have closed the Forum off by altering the permissions, but clicking on the Calendar and the Members buttons enables non-members to see what is in our calendar (at present vacant) and who is on our group. I want to close both those options off so that only members can do this.

Cheers

Hello,

As long as you have the correct permissions set up, you should have nothing to worry about. Users who try to view pages that they cannot view will be presented with a log in screen.

Right, well lets test this. Can you see who the members of our forum are by clicking on the Members button (as seen in this image with the word 'Member' written on it) on the forum which is on this link: http://kskssgroup.forumotion.co.uk/login???? Because at the moment, I can see who everyone is even before I log in. THAT IS THE PROBLEM!! I don't want everyone for galaxies around being able to see who is a member of the forum. I want them to be members of the group (and this of the forum) before they can see who we all are. The Members button should therefore only be able to provide access to the Members list on the forum to those who are actually members of the forum, no-one else. Is there something I am not explaining properly here? 

Hello,

To your forum as a guest i can see the memberlist and the calendar. I cannot see any posts. If i try to search through a member for posts is tells me that i don't have any permission to view the posts.

MrMind wrote:Hello,

To your forum as a guest i can see the memberlist and the calendar. I cannot see any posts. If i try to search through a member for posts is tells me that i don't have any permission to view the posts.

Thanks, EXACTLY. I don't want you to see the memberlist or the calendar at all. As a non-member I just want you to see the buttons, the log-in space where you enter your username (once you become a member of the forum of course) and password, and that is it. Nothing else. Or do I have to remove those buttons completely to stop people accessing the calendar and memberlist? I would prefer just to put some restrictions on them so that only members can proceed through to the calendar and memberlist. That's what I am asking, is that possible?

Well you can hide them completely from guest. So guest will only see the forum button, register and login. After they login they will see the rest or the buttons.

To do that go to Admin Panel >> Display >> Templates >> overall_header
and add the below code before the buttons you want to hide from guests:

Code:

<!-- BEGIN switch_user_logged_in -->

and put all the buttons you want to hide below this code and then close them with this code:

Code:

<!-- END switch_user_logged_in -->

From Example they must be like this:
<!-- BEGIN switch_user_logged_in -->
buttons here
<!-- END switch_user_logged_in -->

Okay, but I can't see where overall header is under Templates, unless you mean Templates >> General >> Overall header, and that brings up a mass of HTML code from what I can see, and since I have no idea whatsoever about HTML I have no idea where to put those codes...and it's all in different colours as well which makes the HTML even more confusing

MrMind, sorry, I need some more guidance as to where to put this code. It sounds like you are on the right track here but I am just confused as to where to put the code exactly. Cheers.

AP > Users & Usergroups > Special Rights

Thanks SLGray, that appears to have sorted it. Ta.

Solved => Archived