Topics about the forum itself like categories or language packs.
OVH
Posts: 52 Joined: Tue Feb 28, 2023 2:35 pm
Has thanked: 3 times
Post
by OVH » Fri Jul 18, 2025 8:01 pm
Guests can watch users control panel
Guests.png (2.8 KiB) Viewed 260 times
I think default setting in phpBB is disabled for guests?
Barbie
Site Admin
Posts: 274 Joined: Thu Nov 08, 2018 7:12 am
Has thanked: 4 times
Been thanked: 16 times
Post
by Barbie » Fri Jul 18, 2025 10:43 pm
Should be, yes. Have you tried that when logged of (as guest)?
Attachments
viewonline.php-AsGuest.jpg (83.67 KiB) Viewed 253 times
OVH
Posts: 52 Joined: Tue Feb 28, 2023 2:35 pm
Has thanked: 3 times
Post
by OVH » Sat Jul 19, 2025 10:00 am
Barbie wrote: Fri Jul 18, 2025 10:43 pm
Have you tried that when logged of (as guest)?
Its asking me to log in. Same if I click on one user name.
But at this time I dont see guests watching users control panel anymore.
OVH
Posts: 52 Joined: Tue Feb 28, 2023 2:35 pm
Has thanked: 3 times
Post
by OVH » Sat Jul 26, 2025 10:50 am
Its still possible:
Guests.png (2.47 KiB) Viewed 188 times
Barbie
Site Admin
Posts: 274 Joined: Thu Nov 08, 2018 7:12 am
Has thanked: 4 times
Been thanked: 16 times
Post
by Barbie » Sun Jul 27, 2025 8:03 am
No problem at all IMO - a screenshot of "User Settings" from a guest account:
Guest@UserSettings#2.jpg (28.04 KiB) Viewed 166 times
Nothing useful to see here:
Guest@UserSettings.jpg (110.4 KiB) Viewed 167 times
OVH
Posts: 52 Joined: Tue Feb 28, 2023 2:35 pm
Has thanked: 3 times
Post
by OVH » Sun Jul 27, 2025 10:39 am
Its not about guest viewing user settings forum but about guest viewing user control panel.
User control panel not user settings.
Barbie
Site Admin
Posts: 274 Joined: Thu Nov 08, 2018 7:12 am
Has thanked: 4 times
Been thanked: 16 times
Post
by Barbie » Sun Jul 27, 2025 8:28 pm
I tested that also: the login page is shown.
OVH
Posts: 52 Joined: Tue Feb 28, 2023 2:35 pm
Has thanked: 3 times
Post
by OVH » Sun Jul 27, 2025 9:10 pm
You can check with another browser. I am sure sure you have 2 browsers or 2 computers.
Log in as forum admin with one browser and with the other one as a guest click on one user name then with the first browser check the guest with your IP in the online list
If it say guest viewing control panel then its a phpBB bug but if not then some guests may have found a way to view users control panel.
Barbie
Site Admin
Posts: 274 Joined: Thu Nov 08, 2018 7:12 am
Has thanked: 4 times
Been thanked: 16 times
Post
by Barbie » Sun Jul 27, 2025 10:06 pm
I can only repeat myself: I already did what you suggested, and even "my guest" accessed from another (public) IP address - the login page is shown for the guest while "Who is online" shows "viewing user control panel".