Notice

The forum is in read only mode.

Support Forum

Welcome! Support Forums have been reactivated
Welcome the Technical Support section. Help us in assisting you by providing us with a concise and descriptive elaboration of your issues. Be specific and if possible, provide us with a step-by-step instruction in replicating your problem.

Photos and safety of users

9 years 11 months ago
  • Danny's Avatar
    Topic Author
  • Danny
  • Offline
  • Fresh Boarder
  • Posts: 27
  • Thank you received: 1
Licenses:
JomSocial Expired

Hallo,

erstmal möchte ich sagen, dass es mich sehr freuen würde, wenn es hier endlich einen deutschen Support geben würde. Man kann die Komponente zwar kaufen aber wenn es Probleme gibt, hat man mit minimalistischem Englisch dann wirklich Probleme.Ich werde mein Anliegen erst einmal in deutsch formulieren und dann einen Versuch in englisch wagen, vielleicht kann es ja jemand besser übersetzen als Google ^^ Danke schonmal.

Es geht um die Fotos und Fotoalben. In den Einstellungen legt der Nutzer fest, dass seine Fotos und Alben nur von Mitgliedern oder auch nur Freunden gesehen werden dürfen. Klickt man als Mitglied ein Foto oder Album an, welches nur von Freunden gesehen werden darf, bekommt man die Mitteilung, dass man das Alnum nicht sehen darf. In Google findet man jedoch passende Links zum Album und kann diesen Direktlink zum Album auch als Fremder aufrufen. Man kann aber auch ein Album, welches ein Nutzer freigegeben hat, aufrufen, die Zahl am Ende des Links ändern und bekommt damit alle vorhandenen Alben, wenn es zu der Nummer am Ende eines gibt, angezeigt. Wo bleibt die Privatsphäre der Nutzer?
Ich halte das für ein großes Sicherheitsproblem. Die Nutzer denken, sie haben geschützte Alben und Google verbreitet sie schön im Netz. Bitte sorgt dafür, dass die Alben auch nicht durch Umwege von Fremden aufgerufen werden können! Danke. Ähnlich wird es sich mit den Profilinfos verhalten. Die komplette Privatsphäreeinstellung müsste hier wohl überarbeitet werden.

Liebe Grüße Daniela

And now translate with Google translator, because my english is very bad :)

Hello,

first I want to say that it would make me very happy if it would finally be a German support here. It is the component may purchase but if there are problems, you have a minimalist English really Probleme.Ich will formulate only once in German and then a try in english, maybe it can have someone better than Google translate ^ ^ Thank you my concern ever.

It's about the photos and photo albums. In the settings, the user specifies that his photos and albums may be seen only by members or even friends. If you click on as a member or a photo album, which can only be seen by friends, you get the message that you can not see the Alnum. In Google you can find links to the album, however, matching and can call this Direct Link to this album as a stranger. But you can also an album that has released a user, view, change the number at the end of the link and thus gets all the existing albums when it comes to the number at the end of a are displayed. Where is the privacy of the users?
I think this is a big security problem. Users think they have protected albums and Google it spreads nicely on the net. Please ensure that the albums also can not be called by detours from strangers! Thank you. Similarly, it will behave with the profile information. The complete privacy setting would probably be revised here.

Greetings Daniela

9 years 11 months ago
Licenses:

Hi, Daniela.

I'm sorry but support is only in English. JomSocial is used in MOST languages in the world. For example: only in European Union is 27 countries and it means that we need to have 27 support members to cover all languages... or 1 support member should know 3 languages on good level... English is a kind of modern lingua franca so we stay with it.

Ok we have scenario:

1. User has an album only for Friends: ROOT/index.php/gemeinschaft/fipspilot/photos/album?albumid=37
2. Not logged in user can't access it and see notice: Die Privatsphäre-Einstellung des Mitgliedes erlauben es dir nicht, diese Seite zu sehen.
3. If this link was indexed by Google then visitor gets the same notice clicking on it in Google results
4. Changing number in link: ROOT/index.php/gemeinschaft/fipspilot/photos/album?albumid=37 has no use as
- other albums could have different ids and numbers don't have be in row
- if other albums have similar privacy settings then same notice will be displayed
- link contains except number user name "fipspilot" so visitor must know EXACT user name
5. Reducing URL to ROOT/index.php/gemeinschaft/fipspilot/photos/ will display privacy notice
6. Only if URL is reduced to ROOT/index.php/gemeinschaft/photos albums that are public are displayed. But this is up to users how they set privacy for their albums. This setting could be reset.

So did I missed something? Could you show me a example link that bypasses privacy settings?


- Instead of saying: 'it's not working', explain the problem in detail.
- Screenshots with the URL visible in them and the problem marked are more than welcome.
- Tell us how to replicate the problem, we can't fix it if we can't find it.
- Make sure that your site/server meets JomSocial System Requirements
- Make sure to setup JomSocial Cron Job
- Always provide us with access details to the backend and ftp. We need it to debug problems.
- If you have a similar problem, but a solution you found isn't working, open a new thread instead of 'merging' with an existing one.

- Use the "Thank You" feature on any post that helped you
9 years 10 months ago
Licenses:

Hi, Danny.

We have not received any response back from you in over 7 days, and would like to know if you consider this issue to be resolved. If you have any further questions, simply reply to this post.


- Instead of saying: 'it's not working', explain the problem in detail.
- Screenshots with the URL visible in them and the problem marked are more than welcome.
- Tell us how to replicate the problem, we can't fix it if we can't find it.
- Make sure that your site/server meets JomSocial System Requirements
- Make sure to setup JomSocial Cron Job
- Always provide us with access details to the backend and ftp. We need it to debug problems.
- If you have a similar problem, but a solution you found isn't working, open a new thread instead of 'merging' with an existing one.

- Use the "Thank You" feature on any post that helped you
Moderators: Piotr Garasiński
Powered by Kunena Forum

Join 180,000 websites creating Amazing communities

JomSocial is the most complete, easy-to-use addon that turns Joomla CMS into a
full -fledged, social networking site

TRY NOW BUY NOW