PDA

View Full Version : New Rtoc website and security



Adey aka Ewok
02-01-2015, 09:14
whilst browsing as a non member not signed in i was able to pull this info with ease, no trickery just viewing in the right place. id at least like mine removed and im sure everyone else would too. here's a few just to prove im not on a wind up and its a proper security issue, i have removed names


13 J** street
**
**
KA* **T

100 M** Drive,
**,
**,
DH* **E


57 B** Avenue
**
**
CH** **P

2, S** Close
**
**
CM** **L

56 ** Street
**.
**.
**
DL* **T

Alex
02-01-2015, 09:45
It's just in people's profile isn't it? You can delete your address if you wish? You don't need to provide these details, it's optional :)

Adey aka Ewok
02-01-2015, 09:48
Not sure on your new one, the issue would be on this site its secure/hidden and porting to the new one has made it viewable to all?

Alex
02-01-2015, 09:50
No, nothing's changed on this site since it was built in 2008.....

Adey aka Ewok
02-01-2015, 09:52
I can't see your full address on this site Alex? I can on the new site?

Alex
02-01-2015, 09:54
Ah right I see. Delete your address on here and check if it appears on the new one?

Adey aka Ewok
02-01-2015, 09:57
Message
A required field called Address is missing or has an invalid value.


Also the site says "Your full address is required when signing up, this includes your your post-code! This is to allow us to process your membership pack and/or your renewal pack! (your address will not be visible to other users)"


I've changed mine to numbers

Alex
02-01-2015, 09:58
I've raised this with the committee.

Bigfoot
02-01-2015, 10:03
Hi Adey,

thank you for pointing that out, have amended post so it don't show full address, not that I live there anymore.

Adey aka Ewok
02-01-2015, 10:06
Good shout :agree:

Matt Cole
02-01-2015, 11:56
Cheers Adey,

Appreciate your help.:agree:

R5MJH
02-01-2015, 12:03
ian mentioned this yesterday ill close the site and investigate but thanx adey for your attention to this:agree:

R5MJH
02-01-2015, 12:12
can you explain where adey and haw you found it i cant see it

R5MJH
02-01-2015, 12:16
i see it now its in information:agree:

R5MJH
02-01-2015, 12:22
its the "about" box in the personal details part, its put the address in there after the import

R5MJH
02-01-2015, 12:49
right looks like its the imports fault, its there on the vc version but the box is empty, on the new import it has copied the address in the about box and that why its displayed sites off fully until fixed

R5MJH
02-01-2015, 13:38
all sorted now so no worrys:agree:

Bigfoot
02-01-2015, 13:47
Great work there, have moved this to website feedback as not needed in General chat

R5MJH
02-01-2015, 14:02
awesome:agree:

Trevhib
02-01-2015, 15:45
smart work guys :agree: