aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorMeik Sievertsen <acydburn@phpbb.com>2007-06-27 16:02:41 +0000
committerMeik Sievertsen <acydburn@phpbb.com>2007-06-27 16:02:41 +0000
commitd57a16ad6964cc76843b7571f29c999ab6d8577a (patch)
tree6177e316cae276253e1c57504613c7216560d11e
parent190f35c4569a90f6b653e3f6b659db5f44516fff (diff)
downloadforums-d57a16ad6964cc76843b7571f29c999ab6d8577a.tar
forums-d57a16ad6964cc76843b7571f29c999ab6d8577a.tar.gz
forums-d57a16ad6964cc76843b7571f29c999ab6d8577a.tar.bz2
forums-d57a16ad6964cc76843b7571f29c999ab6d8577a.tar.xz
forums-d57a16ad6964cc76843b7571f29c999ab6d8577a.zip
deny access to the posting page for bots...
git-svn-id: file:///svn/phpbb/trunk@7804 89ea8834-ac86-4346-8a33-228a782c2dd0
-rw-r--r--phpBB/docs/CHANGELOG.html6
-rw-r--r--phpBB/posting.php4
2 files changed, 8 insertions, 2 deletions
diff --git a/phpBB/docs/CHANGELOG.html b/phpBB/docs/CHANGELOG.html
index 9ec9144bb4..c762718e33 100644
--- a/phpBB/docs/CHANGELOG.html
+++ b/phpBB/docs/CHANGELOG.html
@@ -187,9 +187,11 @@ p a {
<ul class="menu">
<li>[Fix] Re-allow searching within the memberlist</li>
<li>[Fix] Force prune related values to integers during conversions</li>
- <li>[Fix] Updater now detects successfully merged files having conflicts and user chose to merge with modifications [Bug #12685]</li>
- <li>[Fix] Updater is no longer listing missing language entries and styles if these had been removed [Bug #12655]</li>
+ <li>[Fix] Updater now detects successfully merged files having conflicts and user chose to merge with modifications (Bug #12685)</li>
+ <li>[Fix] Updater is no longer listing missing language entries and styles if these had been removed (Bug #12655)</li>
<li>[Fix] Correct approval of posts in global announcements (Bug #12699)</li>
+ <li>[Sec] Do not allow setup spiders/robots to post, even if permissions are given. We see no reason why this should be possible. (Thanks to Frank Rizzo for convincing us regarding this)</li>
+
</ul>
</div>
diff --git a/phpBB/posting.php b/phpBB/posting.php
index 675b390672..f3e6c008c4 100644
--- a/phpBB/posting.php
+++ b/phpBB/posting.php
@@ -164,6 +164,10 @@ if ($post_data['forum_password'])
}
// Check permissions
+if ($user->data['is_bot'])
+{
+ redirect(append_sid("{$phpbb_root_path}index.$phpEx"));
+}
// Is the user able to read within this forum?
if (!$auth->acl_get('f_read', $forum_id))