#33 access to private messages

open
nobody
None
1
2012-09-14
2001-11-27
Anonymous
No

anyone can view any private messages using
following link

export.php?L=english&U=ANYNICK&R=ANYROOM&ST=1&Ign=&Limit=5000

with U= interested nick and R= room.

Discussion

  • Loïc Chapeaux
    Loïc Chapeaux
    2001-11-28

    Logged In: YES
    user_id=144058

    Hi!

    This is already fixed in the 0.15.0 version we're working
    on.

    Anyway thanks for the report,
    Loc

     
  • Logged In: NO

    quick patch on export.php/php3

    ////////////////////
    // old code
    //$CondForQuery .= "(address = ' *' OR (room = '$R' AND
    (address IN ('$U','') OR username = '$U')))";
    //
    ////////////////////////////
    // add by SeazoN

    $CondForQuery .= "(address = '' AND( username='$U' OR
    message LIKE '%$U%' ))";

    // end of add by SeazoN
    ////////////////////////////

     


Anonymous


Cancel   Add attachments