How do I hide user e-mails on the member list?

This is an archive of the phpBB 2.0.x support forum. Support for phpBB2 has now ended.
Forum rules
Following phpBB2's EoL, this forum is now archived for reference purposes only.
Please see the following announcement for more information: viewtopic.php?f=14&t=1385785
blykmik
Registered User
Posts: 40
Joined: Sat Jun 18, 2005 4:38 am
Contact:

How do I hide user e-mails on the member list?

Post by blykmik »

I was just wondering if there was a way to keep the members e-mails private when one selects the memberslist link.

Thanks.
blykmik
Registered User
Posts: 40
Joined: Sat Jun 18, 2005 4:38 am
Contact:

Post by blykmik »

Is this something that would require a mod? Seems like it shold be a standard feature.
espicom
Registered User
Posts: 17905
Joined: Wed Dec 22, 2004 1:14 am
Location: Woodstock, IL

Post by espicom »

Yes, it needs a MOD to "completely" hide email addresses. You can set the configuration to allow members to send email through the board, which replaces the email links with a web form, but that can be abused, too, as I found out two weeks ago.

I'm sure there are published MODs out there for this, but I did it myself. Every place an email address is displayed, I either blanked the email address, or made it available only for moderators and admins.

In memberlist.php, line 183-189 is like this:

Code: Select all

		if ( !empty($row['user_viewemail']) || $userdata['user_level'] == ADMIN )
		{
			$email_uri = ( $board_config['board_email_form'] ) ? append_sid("profile.$phpEx?mode=email&" . POST_USERS_URL .'=' . $user_id) : 'mailto:' . $row['user_email'];

			$email_img = '<a href="' . $email_uri . '"><img src="' . $images['icon_email'] . '" alt="' . $lang['Send_email'] . '" title="' . $lang['Send_email'] . '" border="0" /></a>';
			$email = '<a href="' . $email_uri . '">' . $lang['Send_email'] . '</a>';
		}
I changed the condition test to:

Code: Select all

		if ( $is_auth['auth_mod'] || $userdata['user_level'] == ADMIN )
This makes email disappear, except for moderators ($is_auth['auth_mod']) and Admininstrators ($userdata['user_level']==ADMIN). The changes to the other files that display email links, viewtopic.php and includes/usercp_viewprofile.php, follow the same mold - the tests are similar, and the same "new" conditional makes email addresses invisible if you don't have the right "rights", so to speak.
Jeff
Fixing 1016/1030/1034 Errors | (obsolete link) | MySQL 4.1/5.x Client Error | phpBBv2 Logo in ACP
Support requests via PM are ignored!
"To be fully alive is to feel that everything is possible." - Eric Hoffer
blykmik
Registered User
Posts: 40
Joined: Sat Jun 18, 2005 4:38 am
Contact:

Post by blykmik »

OK... thanks...

I'll take a look.

I was thinking there might be a way to hide the option for users to display their email addresses (and leave it to default off). Maybe I could just delete that choice out of the .tpl file?
espicom
Registered User
Posts: 17905
Joined: Wed Dec 22, 2004 1:14 am
Location: Woodstock, IL

Post by espicom »

Hiding things in the template doesn't affect the program's ability to process requests for things - people can bypass it if they know what the option is named and its acceptable values. Not something the average user does, but it's a consideration.

This method was deemed "most acceptable" the the group that got spammed via the board, because it left email addresses available to those on the club's board of directors, while leaving the spammers out in the cold.
Jeff
Fixing 1016/1030/1034 Errors | (obsolete link) | MySQL 4.1/5.x Client Error | phpBBv2 Logo in ACP
Support requests via PM are ignored!
"To be fully alive is to feel that everything is possible." - Eric Hoffer
WebShaman
Registered User
Posts: 5
Joined: Thu Jul 07, 2005 5:52 am

Post by WebShaman »

In my estimation there should be on and off buttons for the Email address issue. If an individual is not a registered member, he or she should not be able to access the Email addresses of those who are members. It is in essence a privacy and security issue involving the members whose addresses are wide open for the public to access, via the memberlist button.

Security and privacy go hand in hand with each other.
graphictodd
Registered User
Posts: 132
Joined: Sat Jun 18, 2005 5:35 pm

Post by graphictodd »

WebShaman wrote: In my estimation there should be on and off buttons for the Email address issue. If an individual is not a registered member, he or she should not be able to access the Email addresses of those who are members. It is in essence a privacy and security issue involving the members whose addresses are wide open for the public to access, via the memberlist button.

Security and privacy go hand in hand with each other.


I agree... I was asking earlier today if there was a mod that made the member list only viewable by registered users but I never got a reply.
WebShaman
Registered User
Posts: 5
Joined: Thu Jul 07, 2005 5:52 am

Post by WebShaman »

graphictodd wrote: I agree... I was asking earlier today if there was a mod that made the member list only viewable by registered users but I never got a reply.


Security is important, especially the security of a large membership database. Email addresses can be misused in a variety of ways, and making them freely available to unregistered users, should be a big no-no.

I just left SMF because of security related problems with their program, and I certainly like the phpBB2 program over SMF at this point, with the exception that I need to close the security hole concerning unregistered users getting their hands on members Email addresses via the "members" list button.

I strongly suspect that the two of us are not the only one's who are concerned about this issue.
Theangryone
Registered User
Posts: 333
Joined: Wed Jun 22, 2005 4:16 am
Contact:

Post by Theangryone »

does this mod help?

This hack will prevent links in posts from being shown to unregistered users. Instead, they will be advised to register or login. This hack also hides e-mails in the message body.

http://www.phpbbhacks.com/download.php?id=4543
Theangryone
Registered User
Posts: 333
Joined: Wed Jun 22, 2005 4:16 am
Contact:

Post by Theangryone »

I think the following mod is even better:

Restrict Guest Access

This hack denies guests access to member profiles, usergroups, memberlist, search, staff pages and hides the personal information displayed at the bottom of posts.

http://www.phpbbhacks.com/download.php?id=1415
graphictodd
Registered User
Posts: 132
Joined: Sat Jun 18, 2005 5:35 pm

Post by graphictodd »

Theangryone wrote: I think the following mod is even better:

Restrict Guest Access

This hack denies guests access to member profiles, usergroups, memberlist, search, staff pages and hides the personal information displayed at the bottom of posts.

http://www.phpbbhacks.com/download.php?id=1415


Thanks for the mod! I'm going to give this one a try... just what I was looking for.
graphictodd
Registered User
Posts: 132
Joined: Sat Jun 18, 2005 5:35 pm

Post by graphictodd »

graphictodd wrote:
Theangryone wrote:I think the following mod is even better:

Restrict Guest Access

This hack denies guests access to member profiles, usergroups, memberlist, search, staff pages and hides the personal information displayed at the bottom of posts.

http://www.phpbbhacks.com/download.php?id=1415


Thanks for the mod! I'm going to give this one a try... just what I was looking for.


Updated my files with this mod and it was exaclty what I was looking for... thanks again!
Theangryone
Registered User
Posts: 333
Joined: Wed Jun 22, 2005 4:16 am
Contact:

Post by Theangryone »

u r wellcome
graphictodd
Registered User
Posts: 132
Joined: Sat Jun 18, 2005 5:35 pm

Hack Help!

Post by graphictodd »

Theangryone wrote: I think the following mod is even better:

Restrict Guest Access

This hack denies guests access to member profiles, usergroups, memberlist, search, staff pages and hides the personal information displayed at the bottom of posts.

http://www.phpbbhacks.com/download.php?id=1415


I'm trying to find this hack again but the link only takes me to the phpbbhacks.com front page... I can't seem to locate this download or the name so I can search for it... HELP!

Thanks!
sbrunkow
Registered User
Posts: 22
Joined: Tue Mar 08, 2005 8:12 pm

Re: Hack Help!

Post by sbrunkow »

I just searched over there as this looks good.

http://www.phpbbhacks.com/download/1415

Looks like it's not actually there tho.
graphictodd wrote:
Theangryone wrote:I think the following mod is even better:

Restrict Guest Access

This hack denies guests access to member profiles, usergroups, memberlist, search, staff pages and hides the personal information displayed at the bottom of posts.

http://www.phpbbhacks.com/download.php?id=1415


I'm trying to find this hack again but the link only takes me to the phpbbhacks.com front page... I can't seem to locate this download or the name so I can search for it... HELP!

Thanks!
Locked

Return to “2.0.x Support Forum”