Notifications
Clear all

When custom fields will be show in answer posts ? and fail security

7 Posts
2 Users
1 Likes
4,520 Views
Posts: 83
Topic starter
(@mondesensuel)
Trusted Member
Joined: 7 years ago

Hello, 

I hope soon that we can see the custom fields in the answer posts ? 

For exemple :

custom fields

 

And I have a big security fail with Custom Fields.
When I active it on my forum, the members can select his edit page profil, his group. So member, moderator, administrator... 

Hox fix it ?

6 Replies
Astghik
Posts: 5874
Admin
(@astgh)
Illustrious Member
Joined: 6 years ago

Hi Mondesensuel,

I hope soon that we can see the custom fields in the answer posts ? 

I don't follow you. Could you please explain more in detail what you mean? 

And I have a big security fail with Custom Fields.

Please note only admins can set the Usergroup for the users, other users have not such permission, so there isn't any security problem.

 
Reply
Posts: 83
Topic starter
(@mondesensuel)
Trusted Member
Joined: 7 years ago
Posted by: Astghik

Hi Mondesensuel,

I hope soon that we can see the custom fields in the answer posts ? 

I don't follow you. Could you please explain more in detail what you mean? 

And I have a big security fail with Custom Fields.

Please note only admins can set the Usergroup for the users, other users have not such permission, so there isn't any security problem.

 
gender

For exemple, I create a new custom field, gender. When a member just register, he can choose his gender. And we can select if the custom field is show on anser, under the avatar.

 

For the security fail. I have a security fail when I put custom field on.
On edit member page, each member can chose his group. So he can choose moderator group or administrator group. 
I desactive custom field on my forum for it. 

A new member send me a picture on his edit page. He just register, and on his edit profil page, he can choose a new group. He choose admin, and can go on forum and admin/moderate it.
I try to make the same with a new account. I create it, go on my edit profil page, and can choose my group too...

monde s
Reply
Posts: 83
Topic starter
(@mondesensuel)
Trusted Member
Joined: 7 years ago

sorry for the quality, but make a video with 10 mo upload limit, it's very short.
But I found the problem. I put off the member group off the Account Page. And now the member can't choose his group.

So I will explain it. 
I create a new member called "New Member". After register, I go on my account page, and I can choose my user group, register to moderator. I go on forum and I can moderate it, with this exemple, I delete 1 post, and 1 topic. After  I can move a topic.

Reply
Astghik
Posts: 5874
Admin
(@astgh)
Illustrious Member
Joined: 6 years ago

Please navigate to Dashboard > Forums > Member Fields admin page

1. edit the "User Group" filed. 

user group

2. uncheck groups (besides Registered).

set

Save changes, test again.

 

Reply
Page 1 / 2
Share:
Scroll to top