v3articles vunerability (?) and other stuff

[peterska2]

Are there any vunerabilities in the v3articles hack that anyone knows about. It's just that one of my sites that uses it has been hacked but only in that section and even though I have a good idea who has done it I unfortunately can't prove it.

I've checked my permissions and they are all correct so there is no reason why any Tom, ++++ or Harry could just visit my articles page and start editing articles, adding featured articles and posting new stuff without being an admin because everything goes into a moderation queue from there.

Just out of curiousity as well. If you are 99% certain of who has hacked you and they are a fellow vB user but someone who you have long forgotten about after a 6 month long battle in Summer 2003 then would it be worth mentioning to the support guys at vB.com?

[j_86]

There is a huge flaw in v3articles that lets anyone enter and start editing.

Do a search for Geek Articles in this forum, for a template based and fantastic article system, that uses all the features of vb3 but in a nice article and comment based layout.

[deathemperor]

there are some in v3articles, and there's a fix available too, you can try that, it should fix the problem.