Hello Niels!
25 May 20 13:44, you wrote to Vincent Coen:
NH> So as you can see, the user I'm logged in (test) can see that there
NH> are private messages between amiganer and lodger. He can even see the
NH> subject of any private message. This should not be possible. When
NH> querying the local, private echo, user "test" should not see any
NH> messages listed he is neither sender nor recipient of.
NH> However, when user "test" is then trying to read one of the two
NH> messages he was shown, he gets:
NH> "This is a private message; only the owner and addressee can view it."
NH> So is this the expected behaviour and could this be fixed so you can't
NH> "spy" on other conversation topics and participants by running the
NH> Quickscan command.
This bug has been fixed in v1.0.7.16, which was just committed to the
SourceForge Mercurial and Git repositories.
Thanks for letting me know about the issue.
Andrew
--- GoldED+/LNX 1.1.5-b20180707
* Origin: Phoenix BBS * phoenix.bnbbbs.net (1:320/219)
|