diff -r -U 3 -x admin -x userlogin.php phorum-3.4.4/profile.php phorum-3.4.4privacy/profile.php --- phorum-3.4.4/profile.php 2003-07-14 09:04:03.000000000 -0700 +++ phorum-3.4.4privacy/profile.php 2003-07-14 08:56:24.000000000 -0700 @@ -85,6 +85,13 @@ if(empty($id)) $id=$phorum_user["id"]; + if(empty($phorum_user['id'])){ + // must be logged in to see user profile + $target="$forum_url/profile.$ext?id=$id$GetVars"; + header("Location: $forum_url/login.$ext?f=$f&target=$target$GetVars"); + exit(); + } + if($id){ $user_id=$id; $SQL="Select * from $pho_main"."_auth where id='$user_id'"; @@ -445,20 +452,17 @@