When custom fields will be show in answer posts ? and fail security

Hi Mondesensuel,

I hope soon that we can see the custom fields in the answer posts ? 

I don't follow you. Could you please explain more in detail what you mean? 

And I have a big security fail with Custom Fields.

Please note only admins can set the Usergroup for the users, other users have not such permission, so there isn't any security problem.

Posted by: Astghik

Hi Mondesensuel,

I hope soon that we can see the custom fields in the answer posts ? 

I don't follow you. Could you please explain more in detail what you mean? 

And I have a big security fail with Custom Fields.

Please note only admins can set the Usergroup for the users, other users have not such permission, so there isn't any security problem.

 

For exemple, I create a new custom field, gender. When a member just register, he can choose his gender. And we can select if the custom field is show on anser, under the avatar.

For the security fail. I have a security fail when I put custom field on.
On edit member page, each member can chose his group. So he can choose moderator group or administrator group. 
I desactive custom field on my forum for it. 

A new member send me a picture on his edit page. He just register, and on his edit profil page, he can choose a new group. He choose admin, and can go on forum and admin/moderate it.
I try to make the same with a new account. I create it, go on my edit profil page, and can choose my group too...

sorry for the quality, but make a video with 10 mo upload limit, it's very short.
But I found the problem. I put off the member group off the Account Page. And now the member can't choose his group.

So I will explain it. 
I create a new member called "New Member". After register, I go on my account page, and I can choose my user group, register to moderator. I go on forum and I can moderate it, with this exemple, I delete 1 post, and 1 topic. After  I can move a topic.

Please navigate to Dashboard > Forums > Member Fields admin page

1. edit the "User Group" filed. 

2. uncheck groups (besides Registered).

Save changes, test again.