Wednesday, 23 May 2018
  6 Replies
  0.9K Visits
0
Votes
Undo
Hi guys, think this is a security issues that needs pretty urgent attention.

People not logged in have direct access to the following link:

https://WEBSITE.co.za/component/rsvppro/?task=attendees.list&atd_id[0]=200|https://WEBSITE.co.za/component/rsvppro/?task=attendees.list&atd_id[0]=200|0&itemid=362&repeating=1&limit=-10
6 years ago
·
#203130
0
Votes
Undo
Can you upgrade to Joomla! 3.8.8 just because and it should work fine.

Failing that, please provide super user logins and how to recreate the issue.

Many thanks
Tony

JEvents Club members can get priority forum support at the Support Forum. As well as access to a variety of custom JEvents addons and benefits. Join the JEvents club today!Join the JEvents club today!

6 years ago
·
#203117
0
Votes
Undo
Sorry..the notification for new messages has been in spam.
Jevents 3.4.46 Stable
And RSVP 3.4.20
Joomla 3.8.5
6 years ago
·
#202732
0
Votes
Undo
Also, what version of RSVP Pro are you using?

JEvents Club members can get priority forum support at the Support Forum. As well as access to a variety of custom JEvents addons and benefits. Join the JEvents club today!Join the JEvents club today!

6 years ago
·
#202603
0
Votes
Undo
Hi, They were all Inherited (Not allow) have set them to DENIED now as well, but page still displaying..will do a few more tests my side.
6 years ago
·
#202585
0
Votes
Undo
As an example I have tested:

/index.php?option=com_rsvppro&task=attendees.list&atd_id[]=1|0&repeating=1&Itemid=242

Which just returns a blank content area.

Many thanks
Tony

JEvents Club members can get priority forum support at the Support Forum. As well as access to a variety of custom JEvents addons and benefits. Join the JEvents club today!Join the JEvents club today!

6 years ago
·
#202584
0
Votes
Undo
Hello,

What are your RSVP Pro configuration settings for permissions for public/guests ?

Many thanks
Tony

JEvents Club members can get priority forum support at the Support Forum. As well as access to a variety of custom JEvents addons and benefits. Join the JEvents club today!Join the JEvents club today!

  • Page :
  • 1
There are no replies made for this post yet.

Members Area

Show your support

Unlike many Joomla calendars we do not charge to download JEvents - please show your support for this project by becoming a member of the JEvents Club Club members get access to early releases, exclusive member support forums, and Silver and Gold members can use many exciting JEvents addons

Your membership will ensure that JEvents continues to be the best events calendar for Joomla.