home bbs files messages ]

Just a sample of the Echomail archive

Cooperative anarchy at its finest, still active today. Darkrealms is the Zone 1 Hub.

   SYNCHRONET      Rob Swindell fetishistic worship forum      43,341 messages   

[   << oldest   |   < older   |   list   |   newer >   |   newest >>   ]

   Message 40,794 of 43,341   
   Digital Man to Dumas Walker   
   Q Restriction on Web bug?   
   05 Dec 24 14:13:32   
   
   TZUTC: -0800   
   MSGID: 53197.sync@1:103/705 2bb82b59   
   REPLY: 72307.sync@723:320/1 2bb81eda   
   PID: Synchronet 3.20a-Linux master/5f89c517d Dec 04 202 GCC 12.2.0   
   TID: SBBSecho 3.23-Linux master/5f89c517d Dec 04 2024 18:30 GCC 12.2.0   
   COLS: 80   
   BBSID: VERT   
   CHRS: CP437 2   
   NOTE: FSEditor.js v1.105   
     Re: Q Restriction on Web bug?   
     By: Dumas Walker to All on Thu Dec 05 2024 11:01 am   
      
    > If a Q restricted user logs into the bbs via telnet, SSH, etc., they are   
    > only shown the QWK menu and if they choose to "quit back to the BBS," the   
    > system immediately logs them off.  The Q-restricted account cannot access   
    > any message areas, or anything else on the system.   
      
   A Q-restricted account actually can perform a "normal" login by prepending a   
   '*' to their login-id.   
      
    > If a Q restricted user logs onto the web interface (both the older "runes"   
    > or the newer ecweb), they are able to access message areas and even post   
    > using their QWK ID.   
    >   
    > I would call this a "bug" since it is allowing the web interface to act in a   
    > different (and unintended) manner from the terminal interface, but I am also   
    > guessing there is some way that I can add something to an existing INI file   
    > to prevent this behavior?   
      
   You can set SCFG->Servers->Web Server->Login Requirements (in v3.20a) to "REST   
   NOT Q" and then Q-restricted users won't be able to authenticate with the web   
   server. There's probably other ways to limit access to (e.g. webctrl.ini files   
   and maybe something ecWeb-specific), but that's a true brute-force way.   
   --    
                                               digital man (rob)   
      
   Synchronet "Real Fact" #80:   
   85 SBBSecho registrations were sold (at $49) between 1994 and 1996   
   Norco, CA WX: 69.2øF, 49.0% humidity, 1 mph WNW wind, 0.01 inches rain/24hrs   
   --- SBBSecho 3.23-Linux   
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)   
   SEEN-BY: 10/0 1 102/401 103/1 17 705 105/81 106/201 124/5016 128/187   
   SEEN-BY: 153/7715 218/0 1 215 601 700 840 860 870 880 930 226/30 227/114   
   SEEN-BY: 229/110 114 206 317 400 426 428 550 700 705 266/512 280/464   
   SEEN-BY: 282/1038 291/111 301/1 320/219 322/757 342/200 396/45 460/58   
   SEEN-BY: 633/280 712/848 902/26 5075/35   
   PATH: 103/705 218/700 229/426   
      

[   << oldest   |   < older   |   list   |   newer >   |   newest >>   ]


(c) 1994,  bbs@darkrealms.ca