Kunena 7.0.5 & Kunena 6.4.11 – Security Updates Released

The Kunena team has announce the arrival of Kunena 7.0.5 [K 7.0.5] in stable which is now available for download as a native Joomla extension for J! 5.4.x/6.0.x. This version addresses most of the issues that were discovered in K 6.2 / K 6.3 / K 6.4 and issues discovered during the last development stages of K 7.0.

The Kunena team is also pleased to announce the eleventh version of Kunena 6.4, a native Joomla extension for Joomla! 5.0, 5.1, 5.2, 5.3, 5.4 and 6.0.

Topics that are moved into this category are generally considered to be closed. Users may want to add additional information but these topics should not be resurrected in order to discuss new problems or unrelated matters.

Important Cannot delete threads as Admin

More
14 years 6 months ago #110834 by Wineblue2
Yes that is correct. Using the administrator login screen I logged into the Joomla backend as Admin yet after opening the web sites front end and going to the forum I could not see any delete buttons until after I logged in "again" into the forum and then the delete button and others appeared. Our developer may need to look into this but Joomla, JomSocial and Kunena all have their own logins which he was to make sure we had only one login required for access to all features and components for the entire web site rather than having multiple user db's for each of these. Another thing I need to bring up is that with JomSocial using the ACL we created another Group within the web site which has special access privileges to additional features that standard users do not. So this could be an issue being as Kunena was the last component that was installed on the site and I noted the original issue I reported here while going through its configuration and setup after installing it.

Please Log in or Create an account to join the conversation.

More
14 years 6 months ago - 14 years 6 months ago #110845 by sozzled
Your administrator (backend) website is a different and separate site to your normal/frontend/Joomla/whatever-you-want-to-call-it website. If you are logged-in to one site you do not (as you may have thought) also become "logged-in" to the other. Each of those sites maintains its own login sessions. There's nothing that needs to be investigated here (that I can tell). This is completely standard behaviour for Joomla.

As I wrote in my last reply to you, our understanding of what you mean by "I was already logged into Joomla" was different to your understanding. Thank you for clearing up the mystery about that. :)

The simple point is that when you login to your website frontend, you then have the means of deleting topics. There is no "topic deletion" function in the site backend.

As far as the other matter you wanted to raise (about JomSocial and ACLs) please start a new topic. Thanks.
Last edit: 14 years 6 months ago by sozzled.

Please Log in or Create an account to join the conversation.

More
14 years 6 months ago #110986 by Matias
Yes, as sozzled says there's a reason why login into backend is separate to frontend. That is a design choice in Joomla itself and can be used to prevent certain kinds of attacks into your site, where malicious user is trying to administrate site with your user. If we were in the perfect world and there were no security issues in Joomla components, you wouldn't need to do that. But as we aren't in perfect world, my advice is that you should never log into and use both frontend and backend at the same time. So before logging into one, log out from the another -- or at least don't use frontend during that time.

Please Log in or Create an account to join the conversation.

More
14 years 6 months ago #111002 by Wineblue2
I was not questioning there being two logins. I understand Joomla in this respect very well however, I found it a bit out of place and odd that by merely clicking the "View Site" link from the admin and then going to the forum without logging in that my Admin avatar would be displayed as though I was logged in. It was at this time I could not see the Delete button until I actually logged on. I would have thought that like any other Joomla web site I have with Kunena also installed that my Admin avatar would not display until after I logged in. This just seemed out of place from my previous experiences and from other Joomla sites I have.

Please Log in or Create an account to join the conversation.

More
14 years 6 months ago #111018 by sozzled

Wineblue2 wrote: I found it a bit out of place and odd that by merely clicking the "View Site" link from the admin and then going to the forum without logging in that my Admin avatar would be displayed as though I was logged in.

I must confess that I have struggled for a couple of hours to try to understand what you are trying to describe and I still have to state, quite simply and unequivocally, if you want to do frontend things on your Joomla website then you have to login to the frontend of your Joomla website no matter how you arrived at the frontend of your Joomla website.

If there's some odd behaviour, involving going from your backend to your frontend, that you can't understand and you would like an explanation of that behaviour, please contact the Joomla support forum . Thanks :)

Please Log in or Create an account to join the conversation.

Time to create page: 0.312 seconds