WPIntell

Source evidence

Pagination steps through not aloud access areas

Access Areas for WordPress · support · 2016-04-15T23:46:00+00:00

complaintsentiment
mediumseverity
0.87relevance
1replies
Evidence linked to opportunitycommercial context

Proof Health

Open evidence

Commercial opportunities need traceable source links before they are treated as build-worthy.

6 / 34 rows with source links

17.6% of this page's analysis has direct source links.

0 build-decision rows missing links

0 rows here require auditable proof before promotion.

28 rows with no attached evidence

0 rows have source counts but still need direct links.

Conversation

support
ziguri unresolved
Hi Jörn, i just figured out that the pagination links (see code below) allows to enter restricted access areas. <span class=”nav-next”> <?php previous_posts_link(NEWER_POSTS); ?> </span> <span class=”nav-previous”> <?php next_posts_link(OLDER_POSTS); ?> </span> Example: 1) Post 1 with access level 1 2) Post 2 with access level 2 3) Post 3 with access level 1 Assume that my test user is aloud to read level 1. So if i am in post 3 and click “older posts” i expect to see Post 1! But – in fact, one see Post 2 which should be hidden. Any suggestions to solve this? Have a nice day! ziguri https://wordpress.org/plugins/wp-access-areas/ Hi Ziguri, just tried to reproduce your issue but for me everthing works correctly. It is also a little unclear to me if you are on the posts list or on a single post (“if i am in post 3” suggests so). Anyway, I tested both. My test setup: – WP 4.5 – Theme: Twenty Fifteen – 8 posts, all have “Level 1” access, except 2+7 which have “level 2” – Settings / Reading: 5 posts per page – Testuser with access to “level 1” but not “level 2” Possibly another plugin or theme interfering? cheers jörn

Comments

1 shown
podpirate 2016-04-22T12:07:00+00:00

Hi Ziguri, just tried to reproduce your issue but for me everthing works correctly. It is also a little unclear to me if you are on the posts list or on a single post (“if i am in post 3” suggests so). Anyway, I tested both. My test setup: – WP 4.5 – Theme: Twenty Fifteen – 8 posts, all have “Level 1” access, except 2+7 which have “level 2” – Settings / Reading: 5 posts per page – Testuser with access to “level 1” but not “level 2” Possibly another plugin or theme interfering? cheers jörn