Severity: MEDIUM
Location: src/Controllers/ForumController.php:2040-2068
Bug: No visibility filter on joined forums row.
Fix: AND f.visibility = 'public' in the SQL.
Status: open. Will reply with remediation details when resolved.
Severity: MEDIUM
Location: src/Controllers/ForumController.php:2040-2068
Bug: No visibility filter on joined forums row.
Fix: AND f.visibility = 'public' in the SQL.
Status: open. Will reply with remediation details when resolved.
Resolved.
ForumController::findRelatedThreads now filters forums.visibility = 'public' AND is_deleted = 0 in SQL (src/Controllers/ForumController.php). Threads from hidden or private forums never surface in the "Related Threads" sidebar widget, so reply/view counts from private communities stop leaking.
Locking this thread.