Bug Found!! Affiliate page accessible even when "Is Affiliate?" is set to "No"

Discussion in 'Troubleshooting' started by instapro, Apr 26, 2009.

  1. instapro

    instapro New Member

    Joined:
    Apr 24, 2009
    Messages:
    13
    instapro, Apr 26, 2009
    #1
  2. instapro

    instapro New Member

    Joined:
    Apr 24, 2009
    Messages:
    13
    The support team help me out with a solution :D



    Hi,
    To fix this, edit /amember/aff.php and one line before this line:
    switch ($vars['action']){


    if($vars['action']!='enable_aff' && !$_SESSION['_amember_user']['is_affiliate']){
    fatal_error("Sorry you don't have access to this page");
    }


    > IP: 122.172.49.145
    >
    > Hi..
    > I have set "Is Affiliate?" to "No" for a user. But affiliate program is setup Globally. When I login as that user and type this url, I am able to see the stats page etc.,
    >
    > http://www.yoursite.com/amember/aff.php?action=stats
    >
    >
    > Regs
    > Jawahar
    >
    >

    --
    Alexander Smith <alexander@cgi-central.net>
    instapro, Apr 28, 2009
    #2

Share This Page