shrek1609 Posted August 1, 2009 Posted August 1, 2009 Found out yesterday that members can manipulate the url of the mailbox and read other members messages... so here is the fix... open mailbox.php find the function mail_view() and under the sql query that fetches the mails... add You're unable to view this code. Viewing code within this forum requires registration, you can register here for free. Quote
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.