POSSIBLE Security Problem

[Tree]

If I click on a user's profile, I can see their recent posts (normal). But if they have posted in the "Private Messages To Staff" forum, another "secure" forum, or have recently reported a post, I can see the title to that post. Upon clicking on the post, I get the default vBulletin permission message, which is good.

Didn't know if you cared that much about thread titles or reported posts.

 

[Stephen]

This has been pointed out in the past, I personally do not think it is anything major.

 

[Tree]

I don't think it's anything major. But in case someone does, then here it is.

 

[jeter4982]

Ya, I think it is a valid concern, but I don't think too much can be compromised just via the thread title. Thanks for pointing it out though!

Tom