Kunena 7.0.6 & Kunena 6.4.12 – Security Updates Released

The Kunena team has announce the arrival of Kunena 7.0.6 [K 7.0.6] in stable which is now available for download as a native Joomla extension for J! 5.4.x/6.0.x. This version addresses most of the issues that were discovered in K 6.2 / K 6.3 / K 6.4 and issues discovered during the last development stages of K 7.0.

The Kunena team is also pleased to announce the twelfth version of Kunena 6.4, a native Joomla extension for Joomla! 5.0, 5.1, 5.2, 5.3, 5.4 and 6.0.

Topics that are moved into this category are generally considered to be closed. Users may want to add additional information but these topics should not be resurrected in order to discuss new problems or unrelated matters.

Question Security problem

More
15 years 3 months ago - 15 years 3 months ago #87554 by ChaosHead
Security problem was created by ChaosHead
Under this link mysite.com/forum/who
Any person can see actions of visitors in any categories of a forum. Including the categories hidden for it.

Please, in upcoming versions block display under this link for visitors. This must see only Site Administrators and Global Moderators.
Last edit: 15 years 3 months ago by ChaosHead.

Please Log in or Create an account to join the conversation.

More
15 years 3 months ago #87557 by sozzled
Replied by sozzled on topic Re: Security problem
Can you provide a little more information, please. For example, your K 1.6 configuration report would be helpful.

Can you tell us when this kind of "security problem" occurs and how other people can reproduce those conditions that you have on your forum?

Thanks
Blue Eagle vs. Crypsis reference guide
Read my blog and
[img

Please Log in or Create an account to join the conversation.

More
15 years 3 months ago #87564 by ChaosHead
Replied by ChaosHead on topic Re: Security problem
Our community - a game clan. Our site - archangels.su. All players in a clan are divided into various groups. With various access rights at a forum. Beginners shouldn't know that occurs in a clan management. The clan management discusses important themes in closed from extraneous categories.
The clan has opponents - competing clans. Someone from a competing clan has learned that having typed in an address line of the browser: archangels.su/forum/who. He will get to the closed zone for administrators.
Even from names of posts in a category for a management, it is possible to learn about our plans.

My problem consists in it. I want that a zone for administrators could see only administrators.

p.s. I know that last version - 1.6.3. But I have checked up. Updating doesn't solve this problem. And 1.6.2 in the rest works perfectly well.

This message contains confidential information

Database collation check: The collation of your table fields are correct

Legacy mode: Disabled | Joomla! SEF: Enabled | Joomla! SEF rewrite: Enabled | FTP layer: Enabled |

This message contains confidential information
htaccess: Exists | PHP environment: Max execution time: 20 seconds | Max execution memory: 128M | Max file upload: 64M

This message contains confidential information

Joomla default template details : 3rt_replicant2_j15 | author: RocketTheme, LLC | version: 1.5.7 | creationdate: August 23, 2010

Kunena default template details : Archangels | author: cha0shead | version: 1.6.2 | creationdate: 2011-01-30

Kunena version detailled: Installed version: 1.6.2 | Build: 3894 | Version name: Team | Kunena detailled configuration:

Warning: Spoiler!

Third-party components: AlphaUserPoints: Disabled or not installed | CommunityBuilder: Disabled or not installed | Jomsocial: Disabled or not installed | UddeIm: Installed (Version : 2.2)

Third-party SEF components: sh404sef: Disabled or not installed | ARTIO JoomSEF: Disabled or not installed | AceSEF: Disabled or not installed

Plugins: System - Mootools12: Disabled | System - Mootools Upgrade: Enabled | JFirePHP: Disabled or not installed | Kunena Discuss: Enabled (Version : 1.6.2) | Kunena Search: Disabled or not installed | My Kunena Forum Menu: Disabled or not installed | My Kunena Forum Posts: Disabled or not installed

Modules: Kunena Latest: Enabled (Version : 1.6.2) | Kunena Stats: Disabled or not installed | Kunena Login: Disabled or not installed

Please Log in or Create an account to join the conversation.

More
15 years 3 months ago #87972 by Matias
Replied by Matias on topic Re: Security problem
You can disable whoisonline page by replacing it's template file with empty one..

Please Log in or Create an account to join the conversation.

Time to create page: 0.317 seconds