WordPress.org

Support

Support » Plugins and Hacks » [Resolved] Private reply visible

[Resolved] Private reply visible

  • Hi,

    There a dangerous problem – when users are allowed to post forum topics & replies without login / registration, replies set as private are visible to the public. It’s beacuse unregistered topic author id = 0, and logout user id is also 0, ergo logout user = topic author, thus can view private replies

    Just change line 176 to this:

    if( ( $topic_author != $current_user->ID && $reply_author != $current_user->ID && current_user_can( 'publish_forums' ) == false ) || $current_user->ID == 0 ) {

    http://wordpress.org/extend/plugins/bbpress-private-replies/

Viewing 2 replies - 1 through 2 (of 2 total)
Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘[Resolved] Private reply visible’ is closed to new replies.