Hello!
We have an issue with our script. Members once logged in are able to view other members details thru this loophole.
Visit [login to view URL] and click log-in in the menu bar at the top. Log into an temp account called carter at [login to view URL] (password: carter). Once logged in click on 'click here for the latest news' banner which is on the left side and it will take you to a similiar page.
You will notice how the page was written it has the user ID in the URL. The issue is, if you change the user ID from carter to iverson (another temp account) it takes you to another users account. Obviously this cannot happen and needs to be fixed.
Pages that (we are aware) it affects are:
[login to view URL]
[login to view URL]
[login to view URL]
[login to view URL]
[login to view URL]
All code provided needs to be documented should our guys need to make adjustments.
When placing a bid please provide me with your plan on how to fix this issue. The successful bidder will be able to receive payment via PayPal (otherwise please let me know before you bid how you want to be paid).
Any questions please post them on the PMB.
Thank you.