knifeman Posted March 26, 2013 Share Posted March 26, 2013 On a 2.3 store, I have tell a friend set to false for allowing guest to use. I noticed in my whos online, a guest was accessing tell a friend directly. If I try this, i am sent to login.php and whos online says i am on the login page. So it seems there is some bypass for this page. the whos online url ended in process not success. Does this mean the guest was unsuccessful? I have renamed the tell a friend file to prevent any further issues today. Is this a known exploit and is there a fix to prevent this? Tim Link to comment Share on other sites More sharing options...
This topic is now archived and is closed to further replies.