So if I were an evil person then I would write a script to basically repeatedly query that url and increment the post number, collecting topic titles. I would log all that came back with the "restricted" message in the html body but save the title tag. I could use that data to collect what otherwise was likely considered private information.
Seems like an issue.
25 replies to this topic
#22
Matt
-
- IPS Management
-
- 25,999 posts
Chief Software Architect
Posted 14 March 2012 - 07:15 AM
Guys, it's already been fixed.
If you have access to the client forum, grab the topic ID and try and access it via the old index.php?showtopic=x method while logged out.
If you have access to the client forum, grab the topic ID and try and access it via the old index.php?showtopic=x method while logged out.
Matt Mecham
Invision Power Services, Inc.
"I love deadlines. I especially like the whooshing sound they make as they go flying by."
-- Douglas Adams (1952 - 2001)
#23
*José Antonio
-
- +Clients
-
- 30 posts
IPB Newbie
Posted 14 March 2012 - 02:56 PM
Hello Matt, I tested here and it seems that has not been fixed yet.Guys, it's already been fixed.
If you have access to the client forum, grab the topic ID and try and access it via the old index.php?showtopic=x method while logged out.
Access this URL without being logged: "community.invisionpower.com/index.php?app=forums&module=forums§ion=findpost&pid=2240126"
Chaves e chapolin são 10... ou melhor, são 1000
-----
-----
-----
-----
-----
-----
#24
CalendarOfUpdates
-
- +Clients
-
- 353 posts
Advanced Member
Posted 14 March 2012 - 03:15 PM
I can confirm that I can get the topic title from that link in IE 9 and FF 10.0.2.Hello Matt, I tested here and it seems that has not been fixed yet.
Access this URL without being logged: "community.invisionpower.com/index.php?app=forums&module=forums§ion=findpost&pid=2240126"
#25
Matt
-
- IPS Management
-
- 25,999 posts
Chief Software Architect
Posted 15 March 2012 - 04:51 AM
Thanks. It's fixed now. 
- *José Antonio likes this
Matt Mecham
Invision Power Services, Inc.
"I love deadlines. I especially like the whooshing sound they make as they go flying by."
-- Douglas Adams (1952 - 2001)
#26
*José Antonio
-
- +Clients
-
- 30 posts
IPB Newbie
Posted 15 March 2012 - 10:20 AM
Now is perfect!Thanks. It's fixed now.
Thank you very much Matt
Chaves e chapolin são 10... ou melhor, são 1000
-----
-----
-----
-----
-----
-----
0 user(s) are reading this topic
0 members, 0 guests, 0 anonymous users
