MyBB importer exposes deleted posts


(Dan Dascalescu) #1

After going through a thread with 400+ posts to see why the original thread had 415 posts while the imported one had 417, it appears that the importer doesn’t mark deleted posts in any way.

MyBB soft-deleted posts and they’re no longer visible even to Admins. After importing into Discourse, the deleted posts were visible to all users. This may pose a privacy problem if sensitive data had been exposed in the deleted posts.