#33 access to private messages

[Anonymous]

anyone can view any private messages using
following link

export.php?L=english&U=ANYNICK&R=ANYROOM&ST=1&Ign=&Limit=5000

with U= interested nick and R= room.

[Loïc Chapeaux]

Logged In: YES
user_id=144058

Hi!

This is already fixed in the 0.15.0 version we're working
on.

Anyway thanks for the report,
Loc

[Nobody/Anonymous]

Logged In: NO

quick patch on export.php/php3

////////////////////
// old code
//$CondForQuery .= "(address = ' *' OR (room = '$R' AND
(address IN ('$U','') OR username = '$U')))";
//
////////////////////////////
// add by SeazoN

$CondForQuery .= "(address = '' AND( username='$U' OR
message LIKE '%$U%' ))";

// end of add by SeazoN
////////////////////////////