Full Board URL: forum.solbu.net
XMB Version: 1.9.11.13

(EDIT: this post was originally about the deprecated eregi() function, which was resolved by applying the latest patches.)


Today we did a full systems upgrade on our server, from Debian Lenny (5.0) to Squeeze (6.0) (Yes, we are late), and now my two forums main security function doesn't work. One of the forums is a norwegian theology forum.

Up untill today we used to have a hack that Disabled the abillity for ordinary users to delete their own posts. They could edit and empty their post, but that is not the same. The reason we did this was to stop a few users from deleting their entire posting history, leading to the destruction of many threads.

To give an ide of what I'm talking about, here's a hypothetical example.
Suppose the admins of this forum anounce a change in the board rules, which i find silly, and reply to the post saying "You are stupid, because of blah blah bleh."
Then another user replies to me saying "No, you are stupid, because blah bleh blueh" and does not quote my posts, he just replies below mine, and give an agrument on why I'm stupid.
Then I delete the posts, perhaps because i think he's right. Then other people reading the thread will read that the post originally replied to me is telling the admin that he is stupid, when infact the post he's replying to no longer exist.

When we disable the users abillity to completely delete their posts, there is still evidence that something was written, which is no longer there, because the empty/edited post is left behind. By doing this we avoid misunderstandings like in the example.

This hack was the main reason for us to NOT upgrade, unless there was a security update or the forum stopped working, like it did today.


Anyone have any ideas as to how we can acomplish this?

In post.php find

Code:

if (!(isset($delete) && $delete == 'yes')) {

replace with

Code:

if (TRUE) {

Any other questions, please include which version you upgraded from.

Quote: Originally posted by miqrogroove

In post.php find Code: if (!(isset($delete) && $delete == 'yes')) { replace with Code: if (TRUE) {

Unfortunately we cannot use this, as it also stop the moderator and admins from deleting posts. Which in our case is unacceptable.

Quote:

Any other questions, please include which version you upgraded from.

I believe we upgraded from 1.9.10

Code:

if (!(X_STAFF && isset($delete) && $delete == 'yes')) {

Having a busy week here. I hope that was helpful.

Quote: Originally posted by miqrogroove

Code: if (!(X_STAFF && isset($delete) && $delete == 'yes')) {

And that works beautifully, and is more easier to implement than the hack we previously used.

Thank you.

May I request such a function in a future release, maybe with an option on the admin panel.