When custom fields will be show in answer posts ? and fail security  

  RSS

Mondesensuel
(@mondesensuel)
Eminent Member
Joined:1 year  ago
Posts: 41
22/03/2018 9:34 pm  

Hello, 

I hope soon that we can see the custom fields in the answer posts ? 

For exemple :

custom fields

 

And I have a big security fail with Custom Fields.
When I active it on my forum, the members can select his edit page profil, his group. So member, moderator, administrator... 

Hox fix it ?


UsernameMi liked
ReplyQuote
Astghik
(@astghik)
Reputable Member Moderator
Joined:5 months  ago
Posts: 264
22/03/2018 10:07 pm  

Hi Mondesensuel,

I hope soon that we can see the custom fields in the answer posts ? 

I don't follow you. Could you please explain more in detail what you mean? 

And I have a big security fail with Custom Fields.

Please note only admins can set the Usergroup for the users, other users have not such permission, so there isn't any security problem.

 

ReplyQuote
Mondesensuel
(@mondesensuel)
Eminent Member
Joined:1 year  ago
Posts: 41
22/03/2018 11:19 pm  
Posted by: Astghik

Hi Mondesensuel,

I hope soon that we can see the custom fields in the answer posts ? 

I don't follow you. Could you please explain more in detail what you mean? 

And I have a big security fail with Custom Fields.

Please note only admins can set the Usergroup for the users, other users have not such permission, so there isn't any security problem.

 

gender

For exemple, I create a new custom field, gender. When a member just register, he can choose his gender. And we can select if the custom field is show on anser, under the avatar.

 

For the security fail. I have a security fail when I put custom field on.
On edit member page, each member can chose his group. So he can choose moderator group or administrator group. 
I desactive custom field on my forum for it. 

A new member send me a picture on his edit page. He just register, and on his edit profil page, he can choose a new group. He choose admin, and can go on forum and admin/moderate it.
I try to make the same with a new account. I create it, go on my edit profil page, and can choose my group too...

monde s


ReplyQuote
Mondesensuel
(@mondesensuel)
Eminent Member
Joined:1 year  ago
Posts: 41
22/03/2018 11:46 pm  

sorry for the quality, but make a video with 10 mo upload limit, it's very short.
But I found the problem. I put off the member group off the Account Page. And now the member can't choose his group.

So I will explain it. 
I create a new member called "New Member". After register, I go on my account page, and I can choose my user group, register to moderator. I go on forum and I can moderate it, with this exemple, I delete 1 post, and 1 topic. After  I can move a topic.

Edited: 1 month  ago

ReplyQuote
Astghik
(@astghik)
Reputable Member Moderator
Joined:5 months  ago
Posts: 264
23/03/2018 4:17 pm  

Please navigate to Dashboard > Forums > Member Fields admin page

1. edit the "User Group" filed. 

user group

2. uncheck groups (besides Registered).

set

Save changes, test again.

 


ReplyQuote
Mondesensuel
(@mondesensuel)
Eminent Member
Joined:1 year  ago
Posts: 41
23/03/2018 4:52 pm  

Thank you.
And for my question for show a custom field under the avatar post ?


ReplyQuote
Astghik
(@astghik)
Reputable Member Moderator
Joined:5 months  ago
Posts: 264

ReplyQuote
  
Working

Please Login or Register