Restricted content freely available when using ID#

tipsen · Post by **tipsen** » Tue Jul 03, 2007 10:49 am

FAQ entries which are restricted to members of a specific group are freely available to anonymous users when searching for the entry's ID#. Of course this is not easy but since the IDs are sequential it's not too difficult to guess different IDs and perhaps gain access to otherwise restricted content!

Post by **Thorsten** » Tue Jul 03, 2007 11:28 am

Hi,

right... can you add this to the bugtracker?

bye
Thorsten

tipsen · Post by **tipsen** » Thu Jul 05, 2007 5:21 pm

Thorsten wrote:right... can you add this to the bugtracker?

Done!