Admins viewing Private messages

Do not post support requests, bug reports or feature requests. Discuss phpBB here. Non-phpBB related discussion goes in General Discussion!
Anti-Spam Guide
User avatar
KevC
Support Team Member
Support Team Member
Posts: 69361
Joined: Fri Jun 04, 2004 10:44 am
Location: Oxford, UK
Contact:

Re: Admins viewing Private messages

Post by KevC » Sat Jul 18, 2009 10:55 am

Pony99CA wrote:Yes, but the point was that you could view PMs for a user without database access
Except that you said
Pony99CA wrote:Resetting the password will be more difficult. You would have to have database access
Yes it's easy to change someone elses password and log in as them but ultimately it's not much use to you.
Pony99CA wrote:By the way, why isn't there an option in Quick Tools to delete all PMs for a user? I assume deleting a user also deletes his PMs, but what if you just want to delete the PMs without resorting to SQL across two tables (phpbb_privmsgs and phpbb_privmsgs_to)?
Why would you need to delete someone else's PMs?
-:|:- Support Request Template -:|:-
Image
Cheap UK Hosting
"In the land of the blind the little green bloke with no pupils is king - init!"

User avatar
TptMike
Registered User
Posts: 126
Joined: Sat Nov 08, 2008 4:50 am
Location: Stephenville, Texas
Name: Mike White
Contact:

Re: Admins viewing Private messages

Post by TptMike » Sat Jul 18, 2009 2:21 pm

I suppose some boards have a "no advertising in PMs" rule. delete the PM via phpMyAdmin or install a mod. That's the only way that rule could be enforced.
~They tell us not to look down all our life... and that's when you fall in the bathtub.
-Mike - phpBB Knowledge Base

User avatar
KevC
Support Team Member
Support Team Member
Posts: 69361
Joined: Fri Jun 04, 2004 10:44 am
Location: Oxford, UK
Contact:

Re: Admins viewing Private messages

Post by KevC » Sat Jul 18, 2009 2:23 pm

Just put that person in to a group with no PM ability.
-:|:- Support Request Template -:|:-
Image
Cheap UK Hosting
"In the land of the blind the little green bloke with no pupils is king - init!"

User avatar
TptMike
Registered User
Posts: 126
Joined: Sat Nov 08, 2008 4:50 am
Location: Stephenville, Texas
Name: Mike White
Contact:

Re: Admins viewing Private messages

Post by TptMike » Sat Jul 18, 2009 2:28 pm

That would be a consequence to the rule breaking. Still, the phpMyAdmin or Mod would have to be used to find the incriminating evidence. I'm not speaking of what I would do on my personal board... this is just viewing this from outside of the box...

I would just cut off PM's till users got a certain amount of posts on my board.
~They tell us not to look down all our life... and that's when you fall in the bathtub.
-Mike - phpBB Knowledge Base

Pony99CA
Registered User
Posts: 4783
Joined: Thu Sep 30, 2004 3:13 pm
Location: Hollister, CA
Name: Steve
Contact:

Re: Admins viewing Private messages

Post by Pony99CA » Sat Jul 18, 2009 9:45 pm

Kevin Clark wrote:
Pony99CA wrote:Yes, but the point was that you could view PMs for a user without database access
Except that you said
Pony99CA wrote:Resetting the password will be more difficult. You would have to have database access
I'm aware of what I said. I added that for completeness in case anybody wondered how you would restore the password. The main point was still that an admin could view a user's PMs without database access.
Kevin Clark wrote:Yes it's easy to change someone elses password and log in as them but ultimately it's not much use to you.
Who knows how much use it is? The original poster didn't say why they wanted to know whether it was possible to view others' PMs. Maybe I'm an admin of a stock trading forum where a user has a good record in the market, so I think looking at that user's PMs would give me an advantage.

I was just pointing out that it could be done (and without database access if the admin is willing to send an E-mail to the user whose PMs he checked; heck, the admin could just do nothing and let the user think he'd forgotten the password and force him to use the password reset feature). I'm not sure why you're being so dismissive of the point, especially as nobody had raised it here.
Kevin Clark wrote:
Kevin Clark wrote:
Pony99CA wrote:By the way, why isn't there an option in Quick Tools to delete all PMs for a user? I assume deleting a user also deletes his PMs, but what if you just want to delete the PMs without resorting to SQL across two tables (phpbb_privmsgs and phpbb_privmsgs_to)?
Why would you need to delete someone else's PMs?
Maybe somebody is cleaning up space used by inactive users. If somebody hasn't logged in for a few years, they probably don't need their PMs. You might not want to delete the user, but they could have a full PM box.

Or, as TptMike suggested, what if somebody was advertising? Yes, you could put them in a group with no PM ability, but that wouldn't delete all of the advertising PMs in the boxes.

Steve
Silicon Valley Pocket PC (http://www.svpocketpc.com)
Creator of manage_bots and spoof_user (ask me)
Need hosting for a small forum with full cPanel & MySQL access? Contact me or PM me.

I've seen it all
Registered User
Posts: 6
Joined: Sun Jun 13, 2010 10:52 pm

Re: Admins viewing Private messages

Post by I've seen it all » Mon Jun 14, 2010 8:46 pm

As surprising as it may seem, private messages are supposed to be private. If you really want to automate the snooping, write a script that queries the SQL database and returns a list of PMs, with the sender's and the recipient's names..

Mealybug
Registered User
Posts: 18
Joined: Tue Feb 23, 2010 5:57 pm

Re: Admins viewing Private messages

Post by Mealybug » Mon May 13, 2019 2:35 am

Won't the user receive an email saying someone has tried to change their password if you change it as admin to log into their account?

User avatar
Mick
Support Team Member
Support Team Member
Posts: 21578
Joined: Fri Aug 29, 2008 9:49 am
Location: Caerdydd

Re: Admins viewing Private messages

Post by Mick » Mon May 13, 2019 7:50 am

You do realise this topic is ten years old? Lot’s of stuff has changed since then you should start a fresh topic.
"The more connected we get the more alone we become" - Kyle Broflovski

User avatar
stevemaury
Support Team Member
Support Team Member
Posts: 50812
Joined: Thu Nov 02, 2006 12:21 am
Location: The U.P.
Name: Steve
Contact:

Re: Admins viewing Private messages

Post by stevemaury » Tue May 14, 2019 4:52 pm

Mealybug wrote:
Mon May 13, 2019 2:35 am
Won't the user receive an email saying someone has tried to change their password if you change it as admin to log into their account?
Just change their email address at the same time.
For REALLY good and VERY inexpensive hosting CLICK HERE

I can stop all your spam. I can upgrade or update your Board. PM or email me. (Paid support)

Post Reply

Return to “phpBB Discussion”