Well for the password forums I tried that option and this are my results:
a) Either the user can see the forum but locked, 0 posts and they cannot log in
b) They cannot see the forum at all
What I want is a) but instead of displaying 0 posts I want the last post to show up in the index for everybody. They cannot access the topic but this at least shows there is activity inside the locked forums.
This means the forum is locked and shows up as locked but you see the last topic or activity on it. If you click that thread you are of course asked for logins.
As for the images the explanation is exactly the opposite I want to do.
People are uploading malicious pictures from external servers to log data outside the server. What this means is that if you can upload an image on an external server you control the server and you can track hits, logs and even IPs accessing those images, change the image and possible hi jack the topic changing the image behavior.
I want people do be able to upload images, but NO from external urls or server, that means no flicker or third party images hostings. Only images uploaded locally to the server where once published they cannot be changed. Im surprised nobody asked this before.
Most people dont abuse this feature but they do in my case. They can post an innocent image to create a topic and suddenly after a while the image changes to something offensive because the user can control whats hosted in the external server. Get the picture?
|