Quote:
Originally Posted by enginethatcan't
Can mods edit/delete certain auctions by members? and is the personal info easy to obtain if you are a regular member?
|
The auction is not tied in to vbulletin database in any way, so only the admin of the auction (anyone with the admin password defined in the script) or anyone with access to the cgi-bin directory via ftp account can see any personal info or delete any auctions. You can give the admin password to anyone you trust, I suppose. The auction and registration data are stored as text files, that are not encrypted, and they can easily be read or edited by an auction admin or anyone with access to your server, so make sure that your server is secure. If you move the auction directory outside of the cgi-bin directory then make sure it is in a secure place that requires login, such as your forum directory, and also place a blank index.html file in there so nobody can browse that directory from the outside (this is not necessary in the cgi-bin folder since all servers should block that ability). It is also a good security measure to change the name of the auction reg and data folders, and admin.pl script to another name - just change the reference to them in the config area so the script knows where to go and what to do where