Ticinoforum wrote: ↑
Sun Mar 10, 2019 11:08 am
A recent "problem" with member list, made me notice one thing.
On the "toplist" of [Thanks for posts] extension, permission "Can see hidden users" is not respected.
I try to better explain:
If board is settled with "Can see hidden users" at No, the column "last action" of the "toplist" should be hidden as well.
Like in board member list.
If a user can see "last action" of other users, it's a way to know that a user is online and this is like a bypass of the board permission setting.
In my opinion it should be corrected checking the "u_viewonline" flag like in "memberlist.php".
I'ts that clear?
I've checked this issue and, even if it's correct, it's phpbb default behavior. You can check it going to a hidden user's profile, you'll see its last login in "less than a minute ago" if the user just loaded a page even if the user is hidden .
I saw it in this post and checkd by myself: viewtopic.php?t=2465636
EDIT: Oh, I see it hides the column on forum's member list. I'll implement it....