FabSwingers.com
 

FabSwingers.com > Forums > Fabswingers.com site feedback > Website Insecure!!

Website Insecure!!

Jump to: Newest in thread

 

By (user no longer on site) OP     over a year ago

Hi everyone,

We have just noticed that you can view the forums without the need to log in, this will display a thumbnail picture that is on your profile. If you click on this you will be taken to your profile, while the pics on your profile our scrambled it is very easy to get past this and view any public pics on your profile.

We have also noticed that you can view anyone's profile directly without the need to log in!

While we understand that this is a FREE site and anyone can join and view these, we do not like the idea that ANYONE can view these images, or collect these images.

What do you think of this?

Reply privately, Reply in forum +quote or View forums list

 

By *j_markCouple  over a year ago
Forum Mod

Totteridge/Whetstone

If you don't want registered members seeing your pics set to friends only.

Reply privately, Reply in forum +quote or View forums list

 

By (user no longer on site)  over a year ago

i think what they are saying is if u are not logged into this site, u can still view the forums and see the thumnail pics of people. so even non registered people can see this.

Reply privately, Reply in forum +quote or View forums list

 

By (user no longer on site)  over a year ago

Yeah,thats how it reads to us too.Not much struck on non members being able to access the profiles etc.Not good!

Trace & Ric

XXXX

Reply privately, Reply in forum +quote or View forums list

 

By (user no longer on site) OP     over a year ago

That's what I'm saying you do not have to be logged in to see peoples profiles, while you can only see peoples thumbnail pictures, it is very easy to get to see all your public profile picture WITHOUT being log in.

Like you said this is NOT GOOD!!!

Reply privately, Reply in forum +quote or View forums list

 

By *j_markCouple  over a year ago
Forum Mod

Totteridge/Whetstone

Shortly we'll:

Give people the option of hiding their profile from unreg users (on privacy page)

And we'll hide all profile pics from unreg users too

Reply privately, Reply in forum +quote or View forums list

 

By (user no longer on site)  over a year ago

Well its free to register to anyone, so we cant see a problem here? If your worried about anyone seeing your pictures keep them private as it only takes 30 seconds to sign up and see all.

What admin should do is allow users to upload an avatar separately rather than have to use a profile picture.

Would also be a good idea if you could only view pictures on someone else’s profile if you have pictures uploaded yourself.

Reply privately, Reply in forum +quote or View forums list

  

By (user no longer on site) OP     over a year ago

Yes the site is free and anyone can sign up and see everything, but that is not the issue.

If you make yourself a member of a website such as this, you will be bound by any terms and conditions to what the website owner and members can do or not do. By allowing anyone to view your profile they are not bound by anything and is therefore a security risk to your privacy.

As this site allows people in the USA to use it, which is the land of litigation, the owners of the site are open to all sorts of problems.

Myspace and facebook are also free but do not allow non members to view anything, they also have a page long T & C and privacy statements, this is for a very good reason.

Having a water tight T & C and Privacy statement is a must on a members site, as is only allowing members to view the content, this is a must to protect against possible hack attacks, if a hackers sees that a non-member can view content, that may attract attention that other areas are not secure and they will try to break the site (As I believe they did with the old forum)

I am not trying to tell the owners how to run the site, that's up to them, but as an active member surely it is better to advise of any pit falls?

Reply privately, Reply in forum +quote or View forums list

» Add a new message to this topic

0.0156

0