[Dnfbb-developers] Validating posts/topics/forums/categories

[Si C. <sim...@te...>]

> At the moment any validation is done by verifying the existence of the 
> ID, this could potentially open up a hole where a user on board 1, who 
> has the rights to delete a topic, can delete a topic on board 2.

I have now implemented a few more procs, including

DNFI_TOPIC_EXISTS
DNFI_CATEGORY_EXISTS
DNFI_FORUM_EXISTS

Each of these verifies that the user can *see* the topic/category/forum that
they are trying to update, this should make dnfBB a lot more secure in a
multi board environment.

I also noticed that the same code was replicated in about a dozen places and
created the following proc

DNFI_USER_GET_BOARD, to retrieve the board id

Rgds

Si