wpForo 1.x.x [Solved] Fake hidden users still found
This is the 3rd post I'm opening on this issue. Each time it seems resolved but then I discover more problems.
Fake members are not visible, but if I browse .../forum/profile/user-name/ I can see his profile. I discovered this by checking my analytics and seeing that people are opening up fake users' profiles at will.
That because you're admin. You can see anything. If you've correctly configured Guest and Regular usergroup permissions then they cannot see that pages.
trust me, the problem is visible without being logged in as Admin. All checkboxes in usergroup are disabled. This is hackers' job because the website has not traffic yet they view any user they want. I need to fight this.
...thank you for investigating this issue. You can find my forum here, and you can see that the members list shows empty. However, I can browse to one user or another user if I know their names.