Hello,

Today I could query the user list without being logged in. I thought this used to be impossible, or at least it should be impossible, no?

Katja

i'm not sure Katja. But i get the same thing happening if i logout too.

i found in the admin user groups menu:
"Search user list - Allow users in this group to freetext search for users in the user list"

so i clicked that to NO, and saved that. But when i log out, i can still read the user list too.

This might be some shortcoming of this forum software? I tried to look it up on the support forum, and even that seems to have the same issue (!)

http://support.punbb-hosting.com/userlist.php

Anyhow it is weird that the user list can be queried by everyone. In fact I noticed it when I wanted to browse through that list, and see how many users are registered. Today there are 23581. But I can't browse through the user list. When clicking page 2, 3 or higher, the same names from page 1 re-appear.

It is not possible to post without login, but anyone can register, even a bot, no?

Katja

I would assume that at least 20,000 of those registrations are bots. I also noticed the bug with the pages, but i managed to click on the LAST page, and then work backwards from that.