awards.php is outside of permission system?
I just was made aware that the awards.php can be directly linked to and will show some private forum information for members only forums. How can the awards.php file be made so that if unregistered users try to access the awards.php they are given a "don't have permission to view" message instead?
I run a secure forum and having usernames show on any page for unregistered users is a big breach for me in security. Can you please make the awards.php not viewable to unregistered visitors please. This needs to be added to the permission settings ASAP!
|