Admins viewing Private messages

Do not post support requests, bug reports or feature requests. Discuss phpBB here. Non-phpBB related discussion goes in General Discussion!
Scam Warning
seducerx
Registered User
Posts: 64
Joined: Thu May 14, 2009 7:00 am

Admins viewing Private messages

Post by seducerx » Thu Jul 16, 2009 2:04 pm

Is it possible for admins to view the private messages being made inside your forum? Just asking if it's possible.
Wanna get the woman that you want?

Join us at www.attraxionarts.com

Paul
Infrastructure Team Leader
Infrastructure Team Leader
Posts: 25185
Joined: Sat Dec 04, 2004 3:44 pm
Location: The netherlands.
Name: Paul Sohier
Contact:

Re: Admins viewing Private messages

Post by Paul » Thu Jul 16, 2009 2:05 pm

Without a MOD thats not possible to view in the admin panel.
Knock knock
Race condition
Who's there?

My BlogMy Photosmy phpBB Extensionscustom phpBB work & Development

seducerx
Registered User
Posts: 64
Joined: Thu May 14, 2009 7:00 am

Re: Admins viewing Private messages

Post by seducerx » Thu Jul 16, 2009 2:05 pm

you mean to say there is an actual mod that can do that?

edit: you replied faster than I could edit my initial message. Cool!
Last edited by seducerx on Thu Jul 16, 2009 2:06 pm, edited 1 time in total.
Wanna get the woman that you want?

Join us at www.attraxionarts.com

User avatar
A_O_C
Registered User
Posts: 2383
Joined: Sun Jul 01, 2007 11:26 pm
Location: phpbb_

Re: Admins viewing Private messages

Post by A_O_C » Thu Jul 16, 2009 2:06 pm

No, he's saying that you would need a MOD to do that. ;)

seducerx
Registered User
Posts: 64
Joined: Thu May 14, 2009 7:00 am

Re: Admins viewing Private messages

Post by seducerx » Thu Jul 16, 2009 2:07 pm

okay i get it, it's not in the default package of phpbb to do that.

let me rephrase my question then... is there a mod that can do this?
Wanna get the woman that you want?

Join us at www.attraxionarts.com

seducerx
Registered User
Posts: 64
Joined: Thu May 14, 2009 7:00 am

Re: Admins viewing Private messages

Post by seducerx » Thu Jul 16, 2009 2:13 pm

Paul wrote:Without a MOD thats not possible to view in the admin panel.
^ this could also mean that you can view it in some other panel, just not in the admin panel. so if you could view them private messages, where can you view it? if not the admin panel?
Wanna get the woman that you want?

Join us at www.attraxionarts.com

User avatar
A_O_C
Registered User
Posts: 2383
Joined: Sun Jul 01, 2007 11:26 pm
Location: phpbb_

Re: Admins viewing Private messages

Post by A_O_C » Thu Jul 16, 2009 2:16 pm

seducerx wrote:
Paul wrote:Without a MOD thats not possible to view in the admin panel.
^ this could also mean that you can view it in some other panel, just not in the admin panel. so if you could view them private messages, where can you view it? if not the admin panel?
Paul's native language is not english, but I see your point. Regardless,
seducerx wrote:is there a mod that can do this?
If I remember correctly, there was a MOD in development. Try searching that forum. I would also suggest opening up a topic in MOD requests.

User avatar
stevemaury
Support Team Member
Support Team Member
Posts: 50424
Joined: Thu Nov 02, 2006 12:21 am
Location: The U.P.
Name: Steve
Contact:

Re: Admins viewing Private messages

Post by stevemaury » Thu Jul 16, 2009 5:26 pm

If the question is whether an admin can read PMs in phpbb, the answer is no. If the question is, is it possible in some manner for someone to read them, the answer is yes.
For REALLY good and VERY inexpensive hosting CLICK HERE

I can stop all your spam. I can upgrade or update your Board. PM or email me. (Paid support)

ihermit
Registered User
Posts: 251
Joined: Wed Mar 05, 2008 4:26 am

Re: Admins viewing Private messages

Post by ihermit » Thu Jul 16, 2009 8:10 pm

They can look in the SQL Database.

User avatar
Dog Cow
Registered User
Posts: 2494
Joined: Fri Jan 28, 2005 12:14 am
Contact:

Re: Admins viewing Private messages

Post by Dog Cow » Thu Jul 16, 2009 10:11 pm

ihermit wrote:They can look in the SQL Database.
After you've gotten a government permit, of course. :shock:
Moof!
Mac GUI Vault: Retro Apple II & Macintosh computing archive.
Inside Allerton bookMac GUIMac 512K Blog

Pony99CA
Registered User
Posts: 4783
Joined: Thu Sep 30, 2004 3:13 pm
Location: Hollister, CA
Name: Steve
Contact:

Re: Admins viewing Private messages

Post by Pony99CA » Fri Jul 17, 2009 1:07 am

ihermit wrote:They can look in the SQL Database.
In other words, the PMs aren't encrypted. I was able to use phpMyAdmin to view a PM that I sent to a test user.

However, "admins" in general won't have access to the database, right? Only the founder and other trusted people might.

Steve
Silicon Valley Pocket PC (http://www.svpocketpc.com)
Creator of manage_bots and spoof_user (ask me)
Need hosting for a small forum with full cPanel & MySQL access? Contact me or PM me.

Pony99CA
Registered User
Posts: 4783
Joined: Thu Sep 30, 2004 3:13 pm
Location: Hollister, CA
Name: Steve
Contact:

Re: Admins viewing Private messages

Post by Pony99CA » Fri Jul 17, 2009 1:12 am

Paul wrote:Without a MOD thats not possible to view in the admin panel.
However, you can view them in phpBB without a MOD. In the ACP, you can change the user's password, then log in as that user and view the PMs in the UCP.

Resetting the password will be more difficult. You would have to have database access and have saved the hashed value before changing the password in the ACP. After you're done, you could probably update the database with the original hashed password.

Or, you could just send the user E-mail saying that a glitch in the board required you to reset their password. ;)

UPDATE: Or you could use my spoof_user script, which properly restores the user's original password.

Steve
Last edited by Pony99CA on Wed Apr 28, 2010 10:33 pm, edited 1 time in total.
Silicon Valley Pocket PC (http://www.svpocketpc.com)
Creator of manage_bots and spoof_user (ask me)
Need hosting for a small forum with full cPanel & MySQL access? Contact me or PM me.

User avatar
AdamR
Former Team Member
Posts: 9731
Joined: Tue Mar 02, 2004 5:40 pm
Location: Tampa, Florida
Name: Adam Reyher
Contact:

Re: Admins viewing Private messages

Post by AdamR » Fri Jul 17, 2009 1:16 am

One should never assume that anything transmitted over the internet is, in fact, truly "private." ;)

The PMs are not encrypted, as has been said. One must then realize that if it is encrypted, a script must decrypt it on the other end. And an Admin who can browse through the database on the back end to view the PMs would have the same access to utilize said script on those PMs, if it were necessary. :)

- Adam
phpBB Support: Welcome | Userguide | Knowledge Base | Search
Honored supporter of the phpBB Group!
"If I have seen a little further it is by standing on the shoulders of Giants." - Isaac Newton

User avatar
KevC
Support Team Member
Support Team Member
Posts: 69040
Joined: Fri Jun 04, 2004 10:44 am
Location: Oxford, UK
Contact:

Re: Admins viewing Private messages

Post by KevC » Fri Jul 17, 2009 9:41 am

Pony99CA wrote:
Paul wrote:Without a MOD thats not possible to view in the admin panel.
However, you can view them in phpBB without a MOD. In the ACP, you can change the user's password, then log in as that user and view the PMs in the UCP.

Resetting the password will be more difficult. You would have to have database access and have saved the hashed value before changing the password in the ACP. After you're done, you could probably update the database with the original hashed password.

Or, you could just send the user E-mail saying that a glitch in the board required you to reset their password. ;)

Steve
Sounds like a bonkers way to do it.
If you're in the database fiddling about copying hashes for passwords you might just as well look in the PM table and read the message straight off.
-:|:- Support Request Template -:|:-
Image
Cheap UK Hosting
"In the land of the blind the little green bloke with no pupils is king - init!"

Pony99CA
Registered User
Posts: 4783
Joined: Thu Sep 30, 2004 3:13 pm
Location: Hollister, CA
Name: Steve
Contact:

Re: Admins viewing Private messages

Post by Pony99CA » Sat Jul 18, 2009 10:47 am

Kevin Clark wrote:
Pony99CA wrote:
Paul wrote:Without a MOD thats not possible to view in the admin panel.
However, you can view them in phpBB without a MOD. In the ACP, you can change the user's password, then log in as that user and view the PMs in the UCP.

Resetting the password will be more difficult. You would have to have database access and have saved the hashed value before changing the password in the ACP. After you're done, you could probably update the database with the original hashed password.

Or, you could just send the user E-mail saying that a glitch in the board required you to reset their password. ;)
Sounds like a bonkers way to do it.
If you're in the database fiddling about copying hashes for passwords you might just as well look in the PM table and read the message straight off.
Yes, but the point was that you could view PMs for a user without database access (hence the part about sending the E-mail). Also, for somebody not real skilled with myPHPAdmin or SQL, they could use my solution just looking at the user table; they wouldn't have to look at the PM table and find the user ID there.

If you wanted to view all PMs for every user, database access is probably the only simple way to do it.

By the way, why isn't there an option in Quick Tools to delete all PMs for a user? I assume deleting a user also deletes his PMs, but what if you just want to delete the PMs without resorting to SQL across two tables (phpbb_privmsgs and phpbb_privmsgs_to)?

Steve
Silicon Valley Pocket PC (http://www.svpocketpc.com)
Creator of manage_bots and spoof_user (ask me)
Need hosting for a small forum with full cPanel & MySQL access? Contact me or PM me.

Post Reply

Return to “phpBB Discussion”