Question Who's online shows hidden forums/topics

Admins browsing hidden forums are shown in the who's online list with which admin topic they're reading. Anonymous / normal users are denied access when clicking on the topic title, but it's still a security issues since a topic title can reveal more information then wanted.

Maybe has something to do with this fix from 1.0.8?

Some private pages were shown to anonymous users. You couldn't use them to get or alter any private information, but they have been fixed anyway.

Kunena is not actually capable of hiding forums/topics. So how are you going about this? If you're using Joomla's access levels to achieve this you're fining out now that they don't really work.

No, it has nothing to do with that fix. This is another issue.

There are huge amount of these in FB/Kunena. We need to fix them sooner or later.

Can you point me the page?

It is the /forum?func=who page.

Since we have disabled that page for security reasons I've picked a random one from Google:

gcalendar.allon.ch/content/support/forum.html?func=who

In the action column hidden forums/topics are displayed.

Thanks for pointing out the page. This wil be added to my ever growing todo list, too.

No, thank you!