Memberlist visible to unregistered not logged in

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • jdj
    Senior Member
    • Jan 2009
    • 824
    • 5.1.x

    Memberlist visible to unregistered not logged in

    I don't know whether there's an existing thread about this - I searched but couldn't see it - however others may have noticed that the page mysite.com/memberlist is visible to users who are not registered or logged in.

    That shouldn't happen.

    There's a bug report about this here - if you think member details on your site should be private, please vote for it.



    In the short term if you want a temporary fix you can.

    - go to admincp
    - styles
    - style manager
    - for the style you want to edit, choose edit templates
    - go to the bottom of the list of templates and double click on Module Templates
    - choose Widget Memberlist

    At the very top of the page in this widget put in the code

    <vb:if condition="$user['usergroupid'] == 1">
    **ENTER CUSTOM MESSAGE HERE - E.G. YOU HAVE TO BE REGISTERED AND LOGGED IN TO VIEW THIS PAGE**
    <vb:else />

    Then at the very bottom of the page in this widget put in the code

    </vb:if>

    Then when you visit the site not logged in in that style the custom message above will be displayed instead of the memberlist. NB: You need to do if for all styles that the user is able to select.

    Given that this is a simple problem that ought to be fixed, if you think that user privacy is important, please vote to have it fixed.

Related Topics

Collapse

Working...