Possible malicious exploitation by users

Just had a problem on our forums.

Someone posted a thread with the title "$5 million blue print".

vBSEO translated this to "5-million-blue-print.html".

The "-print" suffix meant that only the printable version of the thread could be displayed, and hence no replies were possible.

This appears to be indicative of a broader problem where users may be able to manipulate the last word of their thread title to force a particular rewrite.

Hello,

you can simply change your "'Printthread' URL Format" to avoid the problem with titles that end with "print" word.
For instance, set it to:
[forum_title]/print-[thread_id]-[thread_title].html

You may want to suggest this as the default setting in the vBSEO CP.

Thanks.

Thanks, I'm glad it worked for you