[Solved] Shoutbox Security

[Bobster65]

Hey, not sure if anyone has figured out how to secure their shoutbox and shoutbox_max yet, but if you have, would you mind sharing it?

Currently anyone not logged onto an IM site can access the shoutbox and or shoutbox_max ... not sure if there is a secret setting somewhere to make it so that you HAVE to be logged to view shout. I want to keep info in shout only to registered users.

Anyway, if anyone has any secrets.. please post! Thanks in Advance!
===========================
Thanks to tmotley and found it for a solution. Already added and functional without a problem.. running IM140/2.0.20

This was the topic I was thinking of...

http://integramod.com/forum/viewtopic.p ... low+access

There is a mod called permission pages at phpbb.com...which will do exactly what you are looking for ....i use it on 3 sites without any problems...

Here is the link

http://www.phpbb.com/phpBB/viewtopic.php?t=290219

[tmotley]

Quick fix!

1. ACP, IMPortal, Blocks Management, IntegraMOD Default
2. Find your Shoutbox block in the list and click Edit
3. Down near the bottom, for View By: select Registered Users
4. Save changes.

This will make your Shoutbox on both the portal and index pages nonviewable by nonlogged in users.

[Bobster65]

Actually, this doesn't work (I already did this)...

Perform the steps that you say below, logout of your site and then append either shoutbox.php , shoutbox_view.php or shoutbox_max.php to your URL and you can view it while not logged in. I've tested this on every IM site that I know of and nobody's is secure.

Thanks tho.

Quick fix!

1. ACP, IMPortal, Blocks Management, IntegraMOD Default
2. Find your Shoutbox block in the list and click Edit
3. Down near the bottom, for View By: select Registered Users
4. Save changes.

This will make your Shoutbox on both the portal and index pages nonviewable by nonlogged in users.

[tmotley]

Well, you are right. I remember a topic around here somewhere about restricting access to different parts of your board.

I don't worry about the shoutbox being public since I make it clear to my members that all personal stuff should NOT be in the shoutbox. I have it set to be viewable by ALL but I'm quite sure that my members wouldn't figure out to add shoutbox.php onto the base url... they are only students...

[Bobster65]

Ya, I've banned some users that are smart enough to try things like that lol... Thanks tho and if you run across it again, could you pass it on? In the mean time, I think its just a matter of adding some logged in security checks to those 3 files.. shouldn't be to hard to do...

Thanks again for your help bro! <img>

Well, you are right. I remember a topic around here somewhere about restricting access to different parts of your board.

I don't worry about the shoutbox being public since I make it clear to my members that all personal stuff should NOT be in the shoutbox. I have it set to be viewable by ALL but I'm quite sure that my members wouldn't figure out to add shoutbox.php onto the base url... they are only students...

[tmotley]

This was the topic I was thinking of...

http://integramod.com/forum/viewtopic.p ... low+access

[found it]

the mod that is linked to above will do what you want...

[Bobster65]

Thanks guys <img> It works perfect!! This is something that should be part of IM IMO.

[Thug Lyfe]

hey I installed this mod and I get this error
any help

Unable to query page info

DEBUG MODE

SQL Error : 1146 Table 'thuglyfe_wff.im_pages' doesn't exist

SELECT * FROM im_pages

Line : 69
File : page_permissions.php