Damage done by a user (topic locked)

[Silvana]

Hi. One of my users has done damage. He added a script in a post without using "draw text" and, now, the topic is locked by a password. How do I fix it? How do I delete the post, or the topic, without going into them?
This is the topic:
http://la-chiave-nel-pozzo-il-forum.46542.x6.nabble.com/Insert-password-in-una-pagina-Google-Sites-tp1091.html
Thanks for the help..
(The password would be xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx, but it does not work to insert)

....but .... I'm thinking ... it is right that a user can do such a thing? If one wants to, he could block an entire forum. It seems to me that this is a bit dangerous ...

[Pedro]

Please, Unrestricted_posting permissions for the group which can post scripts.
I surrounded the post with "raw" tags.

[Silvana]

Thanks Pedro, but how can I restrict the permissions for the group which can post scripts?  Can you watch if I have done something wrong in users-> change permissions, please?

[GregChapman]

I can't see the permissions screen on your forum but It sounds as if you have given this permission to one or more groups of user:

Unrestricted_posting
Who can post any content without restriction (including javascript code,

[Silvana]

Hi Greg. This is my setup....



....but the script did damage anyway. How so?

[GregChapman]

I'll leave that one to Pedro - but it does seem that, as it stands, the setting doesn't do all that it should.

[Silvana]

Ok, Greg, thank you. I wait for Pedro....

[Pedro]

We are trying to figure out why he was able to post that.

[Pedro]

It was a bug. We fixed.

[Silvana]

Thank you, Pedro. Ciao