/join2 security

by **datacompboy** » Mon Jan 22, 2007 3:10 pm

Again, as with /invite -- with /join2 I can enter private room

by **phpfreechat** » Mon Jan 22, 2007 3:36 pm

which kind of private room ?
please post a complete scenario.

by **datacompboy** » Mon Jan 22, 2007 7:34 pm

$params["frozen_channels"][] = "chanA";
$params["channels"][] = "chanA";
$params["frozen_channels"][] = "chanB";
$params["channels"][] = "chanB";

user should have access only to channels chanA and chanB.
And he can't do
/join chanC

but if he do
/join2 chanC

he enter to chanC...

(the same problem, as if userA do
/invite userA chanC)

by **phpfreechat** » Mon Jan 22, 2007 8:48 pm

OK I see, thank you for the bug report.
I will look at this problem for the next release.

by **phpfreechat** » Wed Jan 31, 2007 10:20 am

Thank you datacompboy, these bug are now fixed in the subversion.

Here is the patchs to fix the problems :
http://phpfreechat.svn.sourceforge.net/ ... vision=940
http://phpfreechat.svn.sourceforge.net/ ... vision=941

by **datacompboy** » Sat Feb 03, 2007 2:51 pm

Am I right -- after fix of join2 I can't /invite user to my channel, if he can't join it?!! (not in restricted channels list).

/join2 security

Who is online