[3.3][RC] Hide Memberlist

[[Dimetrodon]]

Extension Name: Hide Memberlist
Author: [Dimetrodon]
Appreciation: GanstaZ
Extension Description:

This extension prevents the viewing of the whole memberlist by those without group/user admin permissions. The permissions it checks is a_user and a_userdelete .

For users who lack either permission, this extension blocks the standard memberlist view, prevents the searching of users, and prevents viewing group memberships. If someone attempts to access any of these modes, they will get an error message.

Update: This extension now blocks direct links to groups. In addition, attempting to access group memberlists from member-profiles or anywhere else will also result in an error message.

The objective of this is to hopefully prevent access to phpBB's full memberlist without disabling access to the online list and profiles.

I also added the option to disable the team listing for all users. This is now feature locked.


Extension Version: 1.3.0
Requirements: phpBB 3.3.x and at least php 8.1
Extension Download: https://github.com/Dimetrodon-bit/phpBB ... -Extension
The files are to be put into ext/dimetrodon/hidememberlist

Github repository: https://github.com/Dimetrodon-bit/phpBB ... -Extension
Languages: en
Templates: n/a
Screenshots:

It blocking the memberlist:

memberlist blocked.png

It preventing users from being searched when someone attempts to access that mode.

Searchuser blocked.png

[Miri4ever]

This looks very promising and another great security feature.

[[Dimetrodon]]

This looks very promising and another great security feature.

Thank you.

Yeah, it always kind of irked me how one cannot block the memberlist without also blocking profiles.
-------------------------------------

Direct links to groups also get blocked now.

[[Dimetrodon]]

Update: After several improvements, this is now in RC! I even have it active on my own site. Everything is working.