Results 1 to 3 of 3

Thread: Is this serious? Hidden controls allow to upgrade membership levels

  1. #1
    Thread Starter
    Junior Member avincom's Avatar
    Join Date
    Mar 2011
    Location
    France
    Posts
    46
    Thanks
    4
    Thanked 20 Times in 15 Posts

    Is this serious? Hidden controls allow to upgrade membership levels

    I just found out that the user profile page provides hidden controls which can be very easily activated in the browser. When activated, these controls allow users to modify their membership level or extend one's membership without spending a penny and without the admin's knowledege.

    Hiding controls is not enough. They should not be provided to the end user at all.

    IMHO, this is a serious matter. I cannot understand how one can build an elaborate commercial system with paid subscription options and at the same time, allow for this kind of backdoor.

    I am expecting a quick action on this one. I am sure your developers know which controls I am talking about.

  2. #2
    Marketplace Seller mohsinoffline's Avatar
    Join Date
    Dec 2011
    Location
    Algeria
    Posts
    1,575
    Thanks
    44
    Thanked 213 Times in 192 Posts
    You must be an AppThemes customer and logged in to view this response. Join today!
    Do you need content that helps to rank your website better on Google? Check out https://aicontently.com

    Create a website like Retailmenot with FlatterPro Theme , Check out the demo here Retailmenot





  3. #3
    samcy's Avatar
    Join Date
    Mar 2012
    Location
    Germany
    Posts
    12,100
    Thanks
    121
    Thanked 1,756 Times in 1,442 Posts
    You must be an AppThemes customer and logged in to view this response. Join today!
    Rolf Hassel (Samcy)

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. Club Membership Upgrade - Final Query before Upgrading
    By classifiedsnext in forum ClassiPress General Discussion
    Replies: 2
    Last Post: April 21st, 2011, 01:10 AM
  2. Permission Levels
    By lawrencebland in forum ClassiPress General Discussion
    Replies: 3
    Last Post: June 3rd, 2010, 03:40 PM