I think i found a security hole

[eXtreme Tim]

When you have the access masks on and the forum private users can still see its contents by typing in the forum id number. One of my users was screwing around and noticed this and reported it to me.

[JulianD]

I have access mask on and just tried it with my forums and it didn't work.

What version are you using?

[eXtreme Tim]

2.2.5

[okrogius]

Make sure not only do the forum access marks are on but forum permisisons are right. Regular users shoudl have all permisisons diasabled for those kinds of forums manually.

[Steve Machol]

I just checked this on my forums and all they get is the 'You are not allowed' page.

[eXtreme Tim]

My user did it then i did it as a guest. i have access masks on the forums are even hiding.

[eXtreme Tim]

try it on my board http://www.extremechatforums.com/vbulletin/index.php

try forum 37

[mr e]

I tried it on your board and it didn't work.

[Steve Machol]

It didn't work for me either.

[eXtreme Tim]

hmm oh well thats weird it was letting them in last night when they did that. I guess my board felt like being weird.