http://bbpress.org/forums/ bbPress support forums Topic: Users Able To Edit Posts [HACK] Need Help en Tue, 02 Dec 2008 15:26:30 +0000 http://bbpress.org/forums/topic/users-able-to-edit-posts-hack-need-help#post-16965 Fri, 27 Jun 2008 00:36:07 +0000 mciarlo 16965@http://bbpress.org/forums/ <p>I tried it, and you are correct. I mistakenly had my edit time incorrectly set.</p> <p>Thanks! </p> http://bbpress.org/forums/topic/users-able-to-edit-posts-hack-need-help#post-16917 Wed, 25 Jun 2008 16:39:53 +0000 chrishajer 16917@http://bbpress.org/forums/ <p>Can you confirm that? I suspect that would not work either. I tried it in my forum, as a regular member, on a post I wrote a week ago, and I cannot edit it. Is it possible you have a longer time set for the edit lock? A really large number there will allow editing for a long time, and a negative number would probably make them editable by the member who wrote it forever, without expiration.</p> <p>By default, members should not be able to edit any other members posts, and members should only be able to edit their own posts for the configured period of time. Keymasters can edit anything at any time. Is that not your experience? </p> http://bbpress.org/forums/topic/users-able-to-edit-posts-hack-need-help#post-16915 Wed, 25 Jun 2008 16:30:26 +0000 mciarlo 16915@http://bbpress.org/forums/ <p>I did and I cannot. I guess it's not a terrible problem, but it is a way for users to bypass the allowable edit time. </p> http://bbpress.org/forums/topic/users-able-to-edit-posts-hack-need-help#post-16914 Wed, 25 Jun 2008 16:27:42 +0000 chrishajer 16914@http://bbpress.org/forums/ <p>Try registering a new user, log in with a different browser if necessary, and see if you can edit another member's post. </p> http://bbpress.org/forums/topic/users-able-to-edit-posts-hack-need-help#post-16912 Wed, 25 Jun 2008 16:23:37 +0000 mciarlo 16912@http://bbpress.org/forums/ <p>Thank you for the response. I will double check permissions. </p> http://bbpress.org/forums/topic/users-able-to-edit-posts-hack-need-help#post-16910 Wed, 25 Jun 2008 16:15:01 +0000 chrishajer 16910@http://bbpress.org/forums/ <p>I just checked on my bbPress installation and that does not work. It just redirects to the forum home page when I am not logged in. When I log in and try to access the edit.php url, I get redirected to the forum home page as well.</p> <p>I just checked on your forum and I cannot edit posts made by anyone else when I am not logged in. When I log in, I still cannot edit posts made by any other members. I tried this URL:<br /> <a href="http://www.cairoshell.com/forum/edit.php?id=10314" rel="nofollow">http://www.cairoshell.com/forum/edit.php?id=10314</a></p> <p>FYI, the member who created the reply can edit the post for a period of time that is set in bb-config.php. And keymasters can edit posts made by anyone for an indefinite period of time. Is it possible you are using a plugin that gives members more permission than normal? Or that the user seeing this edit functionality is logged in as a keymaster?</p> <p>I am not seeing the problem you describe, so if your users can edit other members posts, you need to look at the permissions that they have. The default installation does not do this in any forum I've checked, including this forum, your forum and my own forum. </p> http://bbpress.org/forums/topic/users-able-to-edit-posts-hack-need-help#post-16908 Wed, 25 Jun 2008 14:44:10 +0000 mciarlo 16908@http://bbpress.org/forums/ <p>Users on my forum are able to use the following url to edit posts:</p> <p>http ://www.cairoshell.com/forum/edit.php?id=['post id here'] </p> <p>How do I fix this? I suspect this is an available bug in every bbPress forum. </p>