Jump to content

Limitation access feature


brigadiar

Recommended Posts

Hello guys ! 

If you enter this strings in browser after your sine name

jreviews/my-listings?user=45 ( any users id )

jreviews/my-media?user=602 ( any users id )

jreviews/my-reviews?user=354 ( any users id )

, you will see media, listings and reviews of this user. 

It's not good if your information is private.

 

Also, an attacker can learn id if you have not changed the name of the super user.

If someone need this feature - write in the comments.

 

post-26467-0-70348800-1445675714_thumb.png

Edited by brigadiar
Link to comment
×
×
  • Create New...