![]() |
At least DrkFusion had the sense to PM me rather than posting in every thread behind me - which I'm quite unlikely to read. Fear the brain power!
|
You read most of the replies, so it wasn't unlikely you were going to read them :p
|
I only read them because I got the PM from DrkFusion and saw how many times Satan had decided to post!
|
Thanks will try it.
|
working on 2.2.9 thx!!!
|
Strange, its not really working for me. After I installed, one search showed up under latest searches, so I thought it was working. However, whenever I search something, it doesnt update the search list, it only shows the same one.
any ideas? |
Quote:
Installed on 2.2.9 :) ;) |
Nevermind I just noticed it does not display mods/admins searches
|
I just made a search as admin in a private forum and then logged in as a regular user, tried to view the results of the search i just did by using the search id and it didn't show up any results. However, when i went back to the search page I could see which query has been run and how many results were returned.
Some of those security issues were apparently solved, but not every one of them as it seems. The regular user can still see what an admin/mod was looking for and how many results were returned, although you don't see the actual results. This is not necessarily a security issue, but a privacy issue. Let's assume the following: An admin searched for "ban AND user x", the reason why he did this is not really relevant, as this scenario is hypothetical. Now user y finds out that there was this search and that several results were returned, he tells this user x and user x makes it public. Now what? Or am I just being paranoid? Icheb |
Hey FireFly, you might want to check me on this one...
I looked into this because I have not been able to see any searchs that I am performing.. Based on the below quote from the MySQL manual: Quote:
I think this should be a correct query, I have tested here and it is working with no issues: SELECT searchid,postids,dateline,querystring FROM search LEFT JOIN user USING (userid) WHERE querystring!="" AND (usergroupid NOT IN (5,6,7) OR search.userid = "0") ORDER BY searchid desc LIMIT 0,10 Also, as a note to some people, I had to upgrade my search.php in order the get the links created correctly so other users could access them. Otherwise, I got a user is not authorized message. Enjoy this info folks.... !! |
All times are GMT. The time now is 05:50 PM. |
Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.
X vBulletin 3.8.12 by vBS Debug Information | |
---|---|
|
|
![]() |
|
Template Usage:
Phrase Groups Available:
|
Included Files:
Hooks Called:
|