Page 1 of 1

Guests rights

Posted: Fri Jul 18, 2025 8:01 pm
by OVH
Guests can watch users control panel :o

Guests.png
Guests.png (2.8 KiB) Viewed 35138 times

I think default setting in phpBB is disabled for guests?

Re: Guests rights

Posted: Fri Jul 18, 2025 10:43 pm
by Barbie
Should be, yes. Have you tried that when logged of (as guest)?

Re: Guests rights

Posted: Sat Jul 19, 2025 10:00 am
by OVH
Barbie wrote: Fri Jul 18, 2025 10:43 pm Have you tried that when logged of (as guest)?
Its asking me to log in. Same if I click on one user name.
But at this time I dont see guests watching users control panel anymore.

Re: Guests rights

Posted: Sat Jul 26, 2025 10:50 am
by OVH
Its still possible:
Guests.png
Guests.png (2.47 KiB) Viewed 35066 times

Re: Guests rights

Posted: Sun Jul 27, 2025 8:03 am
by Barbie
No problem at all IMO - a screenshot of "User Settings" from a guest account:
Guest@UserSettings#2.jpg
Guest@UserSettings#2.jpg (28.04 KiB) Viewed 35044 times
Nothing useful to see here:
Guest@UserSettings.jpg
Guest@UserSettings.jpg (110.4 KiB) Viewed 35045 times

Re: Guests rights

Posted: Sun Jul 27, 2025 10:39 am
by OVH
Its not about guest viewing user settings forum but about guest viewing user control panel.
User control panel not user settings.

Re: Guests rights

Posted: Sun Jul 27, 2025 8:28 pm
by Barbie
I tested that also: the login page is shown.

Re: Guests rights

Posted: Sun Jul 27, 2025 9:10 pm
by OVH
You can check with another browser. I am sure sure you have 2 browsers or 2 computers.
Log in as forum admin with one browser and with the other one as a guest click on one user name then with the first browser check the guest with your IP in the online list ;)

If it say guest viewing control panel then its a phpBB bug but if not then some guests may have found a way to view users control panel.

Re: Guests rights

Posted: Sun Jul 27, 2025 10:06 pm
by Barbie
I can only repeat myself: I already did what you suggested, and even "my guest" accessed from another (public) IP address - the login page is shown for the guest while "Who is online" shows "viewing user control panel".