Comments from non authorised user

• 

  akehursts · Member · Aug 9, 2011 at 2:33 am

  • Copy link
  • Add topic to favorites

  We have our blog set to private for authourised users only in the privacy settings, but have just received a comment from a user who has read the blog then commented on it who has not been added to our list of allowed users. Its not such a big deal this time as we do know them but we are concerned as to the overall security of the information we are posting and who can view it.

  Does anyone have an explaination of how this can happen and how we can stop it?

  thanks

  Adam

  The blog I need help with is: (visible only to logged in users)

• 

  thesacredpath · Member · Aug 9, 2011 at 3:30 am

  • Copy link

  Was the site set to public for a while, and did you have the email subscription thing set up?

• 

  wpgaurav · Member · Aug 9, 2011 at 3:41 am

  • Copy link

  That might be a spam, skipped from Akismet. I think.

• 

  akehursts · Member · Aug 9, 2011 at 3:52 am

  • Copy link

  No to both I think. Always private from set up.

  Causing some angst at the moment at the blog is for a little 4 year old with terminal cancer and the family is under enough pressure without worrying about the privacy of the blog, which is used to update friends and family.

• 

  thesacredpath · Member · Aug 9, 2011 at 4:02 am

  • Copy link

  Is the comment still there for staff to look at?

  Also, go to dashboard > site stats and in the “Totals Subscriptions and Shares” section at lower left does it show any “site subscriptions” or “comment subscriptions?”

• 

  staff-blorbo · Staff · Aug 9, 2011 at 5:03 am

  • Copy link

  If the comment still exists, please quote the first three words so we can track it down.

• 

  akehursts · Member · Aug 10, 2011 at 7:48 am

  • Copy link

  Yes comment is still there. We know the person and are happy for them to have access and comment, but just can’t work out how they got in using their own login/user without us authorising it in the privacy section.

  We did authorise the comment when it first showed up. then did a double take and realised they shouldn’t have been able to leave the comment in the first place with that login.

  Comment first line is

  Submitted on 2011/08/09 at 1:40 pm hey guys, good to hear your having an

  The person most likely previously read the blog using the generic user (lanceupdates) that we give to non computer/blog savy friends and people we don’t know that well.

  Thanks, much appreciated.

• 

  staff-blorbo · Staff · Aug 10, 2011 at 4:57 pm

  • Copy link

  It looks like this use access the blog using the generic account that you distributed, but then clicked the tab to comment as guest, this allowing them to enter their own info.

• 

  akehursts · Member · Aug 11, 2011 at 8:05 am

  • Copy link

  Thanks heaps, mystery solved. Much appreciated.

• 

  staff-blorbo · Staff · Aug 12, 2011 at 5:09 am

  • Copy link

  You’re welcome!