Subject: Member profiles not being restricted

Posted on: 04/02/07 10:21am
By: jordydme

Hi,

At some point my member profiles stopped being restricted to logged in users. I am not sure what changed but now anonymous unregistered members can view profiles and send an email through a users profile as "anonomyous". Below is my config, as you can see it appears I have the correct configuration. Anyone have any ideas what I am missing or wht could have changed this?

PHP Formatted Code
// this lets you select which functions are available for registered users only
$_CONF['loginrequired'] = 1; // all of them, if set to 1 will override all else
$_CONF['submitloginrequired'] = 1;
$_CONF['commentsloginrequired'] = 1;
$_CONF['linksloginrequired'] = 1;
$_CONF['pollsloginrequired'] = 1;
$_CONF['calendarloginrequired'] = 0;
$_CONF['statsloginrequired'] = 1;
$_CONF['searchloginrequired'] = 0;
$_CONF['profileloginrequired'] = 1;
$_CONF['emailuserloginrequired'] = 1;
$_CONF['emailstoryloginrequired'] = 0;
 



Thanks for taking a look,
Jordy

Re: Member profiles not being restricted

Posted on: 04/02/07 12:40pm
By: Dirk

Which Geeklog version is that? From the config.php you quoted, this appears to be 1.3.11 or older.

But even then, I'm not aware of any problems with blocking anonymous users from viewing the profiles in recent versions, so I'm not sure how that could happen, unless you changed the code or something is overwriting the config variables.

bye, Dirk

Re: Member profiles not being restricted

Posted on: 04/02/07 12:53pm
By: jordydme

Quote by: Dirk

Which Geeklog version is that? From the config.php you quoted, this appears to be 1.3.11 or older.

But even then, I'm not aware of any problems with blocking anonymous users from viewing the profiles in recent versions, so I'm not sure how that could happen, unless you changed the code or something is overwriting the config variables.

bye, Dirk



Hey Dirk,

yeah it's an older version. I am pretty burried with modifications and haven't had the time to do the several day upgrade. I am running version 1.3.11sr2 and I just PM'ed you the URL. See if you can view member profiles by clicking on the user full names in the upper right corner of ste. Check your PM's

Re: Member profiles not being restricted

Posted on: 04/02/07 01:25pm
By: Dirk

Yeah, I can see the profile pages. I can also go to the story submission page, even though you have story submissions disabled in the config.php you quoted.

Something is definitively wrong with that site but I would argue that it has something to do with your modifications as I'm not aware of such problems with any of the recent Geeklog versions.

bye, Dirk

Re: Member profiles not being restricted

Posted on: 04/02/07 01:30pm
By: jordydme

could you reccomend any place to look?. I am also sending you another pm

Re: Member profiles not being restricted

Posted on: 04/02/07 02:22pm
By: Dirk

Start with function userprofile in users.php. The checks are right at the beginning of that function. With a few debug prints, it should be easy to figure out what's going wrong there. The checks in other places are done in the same way, so once you've figured out this one, you've probably also solved those.

bye, Dirk

Re: Member profiles not being restricted

Posted on: 13/03/07 11:37pm
By: tgc

I am having the same problem. I disable stats for non-registered users but they appear. When I disable all of them with "loginrequired" then the Link plugin does not appear (which is not on this list) but the stats still does.
I am using GL 1.4.1 and think I have not fiddled with the user.php

Frank

Re: Member profiles not being restricted

Posted on: 14/03/07 07:44am
By: Anonymous

I am not sure what your problem is but mine was solved by disabling Vinney's Paypal plugin for Geeklog. Once I disabled the plugin by using the uninstall option in the Admin CP, the issue was resolved. Try disabling any pluggins recently installed. Hope that helps.

Geeklog - Forum
https://www.geeklog.net/forum/viewtopic.php?showtopic=74079