• We have redone the forum. If you notice any issues or errors please open a Support Ticket under the Members dropdown and let us know.
S

All video attachments are publicly accessible

  • Thread starter Thread starter Sim
  • Start date Start date
S

Sim

Guest

It seems that all video attachments are stored in the data directory rather than in internal_data - which means that they are publicly accessible, even on a private forum, unlike photos or other attachments.

If someone was to extract the video URL from the page and send it to a 3rd party who does not have access to the forum, they would still be able to view the video.

Steps to reproduce:
  1. in a forum that does not have public access, create a post with the following items...

Read more

Continue reading...
 
Similar threads Most view View more
Back
Top