shoutbox security?

[lakelady]

I just came across this page http://www.securityfocus.com/archive/1/442308 and was wondering if this is still a current issue or has been solved in more recent versions. I'm using TP .0971 and SMF 1.1.2.

thanks

[G6Cad]

That issue is fixed quite some time ago, so you dont have to worrie about it.
But to be 99% safe, dont allowe guest posting in the shoutbox.

[lakelady]

hmmmm I see where I can hide the shoutbox from guests but no way to have guests see it but not post in it.

[brianjw]

I have seen people allow guest shouting but just like G6 said you shouldnt use guest posting to be safe
I think this option should be removed just for security but thats my 50 cents :up:

[G6Cad]

When you create the shoutbox block, you have the options for what groups you want the blocks to be shown for, one of them is guests.
So edit the block and check the groups you want it to show up for.
And if you have set the shoutbox up to guests not alowed to post, they will see it, but they wont be able to post in it.

[IchBin]

I posted on that security site that this issue was fixed some time ago. I received like 10 emails back. Most of them gibberish, as if their mail daemon didn't know what the hell to do with my post. About the 10th email I got was from an actual person asking me what I wanted.... lol

These guys don't even know how to run their site? I don't know if I'd trust them or not...