vijayninel
New member
Hi,
I am using Advanced User Tagging (Pro) v 2.0.3 on vB 3.8.5 and the problem is that right now guests are able to tag unlimited number of users in threads.
I have set the usergroup options for unregistered users - Is Excluded Usergroup to - yes Unfortunately this is not having the desired effect.
Another major security feature missing in this mod is that there is no way to reasonably limit the number of members that users can tag. Right now any guest can walking and tag tens of thousands of members to multiple threads, potentially crashing the forum.
A DDOS attack using this mod has already taken place as mentioned by this user : vBulletin.org Forum - View Single Post - [DBTech] Advanced user Tagging v2 (vB3)
Please try and put some reasonable limits to the number of members people that can be tagged or mentioned by user groups per day. Like say 100 mentions/100 tags per 24 hrs. This will prevent misuse of this mod for malicious reasons.
Thanks and regards,
vijayninel
I am using Advanced User Tagging (Pro) v 2.0.3 on vB 3.8.5 and the problem is that right now guests are able to tag unlimited number of users in threads.
I have set the usergroup options for unregistered users - Is Excluded Usergroup to - yes Unfortunately this is not having the desired effect.
Another major security feature missing in this mod is that there is no way to reasonably limit the number of members that users can tag. Right now any guest can walking and tag tens of thousands of members to multiple threads, potentially crashing the forum.
A DDOS attack using this mod has already taken place as mentioned by this user : vBulletin.org Forum - View Single Post - [DBTech] Advanced user Tagging v2 (vB3)
Please try and put some reasonable limits to the number of members people that can be tagged or mentioned by user groups per day. Like say 100 mentions/100 tags per 24 hrs. This will prevent misuse of this mod for malicious reasons.
Thanks and regards,
vijayninel