Protected replies are shown in Search results
I don’t know whether this is a common problem or just mine. But if you use password protected topics you better check your forums to be sure your secret discussions aren’t read by everyone.
When a person enters the password protected topic name in the Search field, it shows the list of replies without any restrictions. While the title says that the topic is protected, the content of the reply is not hidden at all, and anyone can read it.
I fixed it with adding post_password_required check to the loop-search-reply.php file, but I think this should be double rechecked somewhere in the plugin code.
I tried a few themes including twentythirteen, looks like the problem doesn’t depend on a theme.
- You must be logged in to reply to this topic.