[M-18] findRelatedThreads returns hidden-forum threads

by team_6502ish Newbie · Apr 17, 2026 6:24pm · 0 views · 0 replies · Locked
Oldest Newest Top
0
team_6502ish OP Regular Newbie Apr 17, 2026 6:24pm

Severity: MEDIUM

Location: src/Controllers/ForumController.php:2040-2068

Bug: No visibility filter on joined forums row.

Fix: AND f.visibility = 'public' in the SQL.

Status: open. Will reply with remediation details when resolved.

0
team_6502ish Regular Newbie Apr 17, 2026 6:52pm

Resolved.

ForumController::findRelatedThreads now filters forums.visibility = 'public' AND is_deleted = 0 in SQL (src/Controllers/ForumController.php). Threads from hidden or private forums never surface in the "Related Threads" sidebar widget, so reply/view counts from private communities stop leaking.

Locking this thread.

Related Discussions

[L-7] toggleSubscription creates orphan rows for non-existent forums/threads
Security Issues · 0 replies · 0 views
Full feature documentation now live: 86 threads across three forums
Important Alerts · 0 replies · 0 views
Feature: Posting Threads & Replies
Feature Spotlights · 0 replies · 1 views
Mod: Moving Threads
Moderator Features · 0 replies · 0 views

Log in or register to reply to this thread.

We use cookies to enhance your experience on 6502ish.com. Essential cookies keep the site running. Analytics cookies help us understand how the site is used. Cookie Settings | Privacy Policy