IP addresses in comments

dpnow · October 26th, 2007, 03:54 AM

It's just been brought to my attention that in one of my PhotoPost galleries that IP addresses are shown in the comments - not just to admins, but to everyone.

I'm running v.6 integrated with vB 6.4

I saw in an older response to this issue to remove some code but I'd really like to fix this without doing that.

Thanks,

Ian

Chuck S · October 26th, 2007, 09:28 AM

There is no bug here we see in our code. I have tested and double checked on about 10 sites thus far to confirm.

This is right in showphoto.php and confirms the only ones who see IP's are admins or mods so if you say everyone can see it why do they have mod access? I suggest you check your usergroup settings to be sure.

Code:

Content visible to verified customers only.

dpnow · October 26th, 2007, 01:21 PM

What do I have to check to ensure admin status is not accidentally inferred on everyone? Even if you are not logged in you can see the IP addresses (http:/fourthirds-user.com/galleries).

In PhotoPost UserGroup Editor the normal user groups are set to No Admin Access and No Mod Access. Only the Mod and Admin user groups have this set.

Ian

Chuck S · October 26th, 2007, 01:28 PM

You can check that to make sure they are not mods or admins in Admin => Edit Usergroups.

dpnow · October 26th, 2007, 01:30 PM

Quote:

Originally Posted by dpnow

What do I have to check to ensure admin status is not accidentally inferred on everyone? Even if you are not logged in you can see the IP addresses (http:/fourthirds-user.com/galleries).

In PhotoPost UserGroup Editor the normal user groups are set to No Admin Access and No Mod Access. Only the Mod and Admin user groups have this set.

Ian

Ah! Looks like it could be a cookie thing. I thought I was logged out (certainly wasn't logged in to the forum) but I could still post comments under my logged in ID.

Does PhotoPost have its own cookie and is this not cleared by the forum (vB) when logging out from there?

Now I have cleared my cookies in the browser the IP addresses don't show any more.

Ian

Chuck S · October 26th, 2007, 01:33 PM

Yep make sure whatever integration your using you match the cookies with the forum like so

cookie path /

cookie prefix match this to your forum

cookie domain .yoursite.com you want both photopost and forum using .yoursite.com so it works on all subdomains.