Jump to content

"Moderate Content" accounts circumvention exploit


arbee

Recommended Posts

For a few years now all our regulars are accustomed to an "Unlimited" edit-time-limit on their posts. We have recently discovered that accounts flagged with "Moderate Content" can still edit all their old posts to whatever they want as a way to bypass the rule. Hence we changed the edit time limit to 1440 minutes for most everyone (in our case we call them (their group) "Full Members"). However, now there's an uproar.

Apparently there is no way for moderators (not admin) to change the GROUP a user is in. This would have been a way to have a different edit time limit for those who are in "Moderate Content" status.

Can you consider making people who are in "Moderate Content" status automatically not have the ability to edit their past posts? This seems like a logical thing to do (in 100% of all cases in any forum) since anyone who is in this status aren't trusted with whatever content they are trying to post (including editing/changing a past post to circumvent).

moderatecontent2.PNG

Link to comment
Share on other sites

I have previously posted about this as a ticket in the client area. The support guys agreed with what I said but said they are not part of the dev team and that it was best to post it here to garner more support to have this changed.

Link to comment
Share on other sites

This was the reply I got from my ticket prior to my closing the ticket. I have left out the name of the support staff because I don't want to put him "on the spot":

"Yes, I personally agree but we in Support are not on the development team, so please post this in our suggestions forum as my colleague noted, where others can add their support to the suggested change."

Well it sure seems I am unable to get people to "add their support to the suggested change". I suppose that's because most people will just ban the user without giving them a chance. However, it just seems like a OBVIOUS thing to do. If you need to moderate a user's content before it posts then there should LOGICALLY be no reason to let them circumvent by altering a past approved post. Could anyone at Invision please just see this as a logical step and decide that it's the best thing to do?

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...
https://invisioncommunity.com/forums/topic/438359-moderate-content-accounts-circumvention-exploit/
invisioncommunity.com
CC-MAIN-2024-30
184781
application/http; msgtype=response
sha1:6WQWHFCQ3OZ5UFKG4TWPJJ54PDROHMPN
<urn:uuid:0afc83af-e215-47e0-9df7-8787bc928a7b>
2024-07-18T23:10:51Z
18.165.83.104
text/html
sha1:Z4GGKNAHCZKTRTHZLYYRYCKUYCQULNI3
<urn:uuid:f3a01c51-edb6-4947-a0f8-4271d448c999>
https://invisioncommunity.com/forums/topic/438359-moderate-content-accounts-circumvention-exploit/
response
<urn:uuid:135848f2-795f-4208-86bc-ff8ce881b8c2>
isPartOf: CC-MAIN-2024-30
publisher: Common Crawl
description: Wide crawl of the web for July 2024
operator: Common Crawl Admin (info@commoncrawl.org)
hostname: ip-10-67-67-168
software: Apache Nutch 1.20 (modified, https://github.com/commoncrawl/nutch/)
robots: checked via crawler-commons 1.5-SNAPSHOT (https://github.com/crawler-commons/crawler-commons)
format: WARC File Format 1.1
conformsTo: https://iipc.github.io/warc-specifications/specifications/warc-format/warc-1.1/