Private forums not private
-
I just noticed something that annoys me. I was logged in with a test account (non-admin, just forum participant) and the last screen that I had open when I logged out, was another participant’s profile page. Instead of the expected ‘you are not allowed’ page, I could still see the profile page and when I clicked on the ‘replies created’ link, I could also still see this user’s posts, all of which are posted in private fora! When I click on a subject from that archive page, I do get a 404, but I could read all this user’s posts from his profile.
A bit worried I checked if Google can also find these profile pages and indeed…
Is this due to a setting that I missed or could we get something like private users such as we have private fora?
WP 3.5.1 BBpress 2.2.4 monas.nl (check user roy3)
- You must be logged in to reply to this topic.