Exploit?

[Westendorf]

Typing: ?feed=rss2 at the end of the URL of a blog with s2Member installed exposes all content, as far as I can tell.

Has this been addressed before? Is there a way to protect the RSS feed?

[drbyte]

looking at this issue!!! It does using IE, not in FireFox

Jason, can you please look into this issue and let us know

Thank you

[drbyte]

Ok I found a quick fix to this issue

Within your WordPress Admin page go to Settings------>Reading Settings------> and change For each article in a feed, show from Full Text to Summary

Delete your IE Cache and try again. It should work

Sam

[Jason Caldwell]

This is the intended behavior. However, I'm looking for ways to address this issue and make s2Member more secure in this regard. Please have a look at this thread, where I've discussed the reasoning behind it, and feel free to chime in and give me your opinions. viewtopic.php?f=4&t=231&p=866&hilit=feeds#p866