The shoutbox panel was enabled on my site for registered members only.
Yesterday, on Shoutbox admin I enabled the visibility mode to make it possible for the registered members to select the proper visibility mode (General, Admin,Members) for their shouts.
I was surprised that enabling this option will allow the guests to add shouts by entering a validation code.
I thought that using a validation code will be only when allowing the guests to shout.
After enabling the visibility mode , the shoutbox panel was hacked with more than 10 shouts within a minute.
Then I disabled the visibility mode and deleted all the shouts .
Today I enabled the visibility mode again to test it again , and refreshed the home page to see that 9 shouts were added within 1 minute
(Robot shouts) .
Can the visibility mode be allowed for the registered users (members) only?
Can the guests shouts if allowed be reviewed by admin before published?
Please, see the ohotos attatched
Thank you
alqutob attached the following image:Image not found
Image not found
Image not found
Image not found
0 replies