I'd like to point out a major security flaw in this. If you have sections on your forum that are hidden from other users and you are tagged/mentioned/quoted/post liked in it everyone will be able to see the title of the thread.
For example:
User 1 is VIP
User 2 is not
There is a thread by the name of "Thread Title" in a VIP section that user 1 posts. If another user that is VIP likes that post, user 2 will be able to go to their profile and see the title of that thread in the likes section.
---------
This may not be a big deal for some people but on my forum this makes the mod completely unusable. I can't just remove the sections from the profile either because we use the like/dislike feature for rep too and we wouldn't be able to see if people are mass repping each other.
DragoByte Tech- If you could work out a way to prevent users from seeing thread titles that isn't in their allowed sections I'd really appreciate it.
|